From NOVAK.TOMAZ at adria-mobil.si Mon Jul 4 08:05:20 2016 From: NOVAK.TOMAZ at adria-mobil.si (=?iso-8859-2?Q?NOVAK_TOMA=AE?=) Date: Mon, 4 Jul 2016 08:05:20 +0000 Subject: MailScanner/MailWatch error after a while writing into MYSQL, please help Message-ID: <6EE6CBB68B02804781F8CF38D3F0E4730167670F@ADRIA22.adria-mobil.si> Hi! I have the following problem: MailWatch Version = 1.2.0 - RC1 DEV MailScanner Version = 4.85.2 PHP Version = 5.6.1 MySQL Version = 5.6.17 After a day or so, one email comes which brakes my system. Error`s: Jun 29 17:38:19 ADRIA40 MailScanner[13859]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x94\x9C A...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 13166. Jun 30 05:49:56 ADRIA40 MailScanner[16295]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x94\xA5' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 2001. Jun 30 12:11:04 ADRIA40 MailScanner[16766]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x99\x8C' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 11952. Jul 01 08:15:14 ADRIA40 MailScanner[24525]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x8D\xA8 S...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 409. Jul 01 13:24:52 ADRIA40 MailScanner[5449]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x8E\xAC' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 16878. Jul 02 05:00:33 ADRIA40 MailScanner[5466]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x93\xA9 I...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 133. Jul 02 11:31:05 ADRIA40 MailScanner[12677]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x8E\xAF P...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 4442. Jul 03 12:40:54 ADRIA40 MailScanner[16371]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x92\x96 N...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 7529. Jul 04 08:01:05 ADRIA40 MailScanner[8328]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x91\x89\xC2\xA0...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, line 5803. * Frequency after this error appears is about 1-2 times per day. After this error i get on MailScanner child which is stuck, and i get no new rows into my maillog MYSQL table. I have to kill that >stuck< MailScanner child and restart MailScanner, after which my system is working again with no problems. My mailscanner DB into which i am writing has Character set: utf8mb4 and Collation: utf8mb4_general_ci Excluding this my mail system is working for years without any problems. Can you please help me with this ! Thank you all! With regards, Toma? Novak -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Mon Jul 4 09:32:26 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Mon, 4 Jul 2016 05:32:26 -0400 Subject: MailScanner/MailWatch error after a while writing into MYSQL, please help In-Reply-To: <6EE6CBB68B02804781F8CF38D3F0E4730167670F@ADRIA22.adria-mobil.si> References: <6EE6CBB68B02804781F8CF38D3F0E4730167670F@ADRIA22.adria-mobil.si> Message-ID: Tomaz, You really should ask the MailWatch support list. - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?NOVAK TOMA? Reply:?MailScanner Discussion Date:?July 4, 2016 at 5:17:55 AM To:?mailscanner at lists.mailscanner.info Subject:? MailScanner/MailWatch error after a while writing into MYSQL, please help > Hi! > > I have the following problem: > > MailWatch Version = 1.2.0 - RC1 DEV > MailScanner Version = 4.85.2 > PHP Version = 5.6.1 > MySQL Version = 5.6.17 > > After a day or so, one email comes which brakes my system. > > Error`s: > > Jun 29 17:38:19 ADRIA40 MailScanner[13859]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x94\x9C A...' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 13166. > Jun 30 05:49:56 ADRIA40 MailScanner[16295]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x94\xA5' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 2001. > Jun 30 12:11:04 ADRIA40 MailScanner[16766]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x99\x8C' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 11952. > Jul 01 08:15:14 ADRIA40 MailScanner[24525]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x8D\xA8 S...' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 409. > Jul 01 13:24:52 ADRIA40 MailScanner[5449]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x8E\xAC' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 16878. > Jul 02 05:00:33 ADRIA40 MailScanner[5466]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x93\xA9 I...' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 133. > Jul 02 11:31:05 ADRIA40 MailScanner[12677]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x8E\xAF P...' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 4442. > Jul 03 12:40:54 ADRIA40 MailScanner[16371]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x92\x96 N...' for column 'subject' > at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 7529. > Jul 04 08:01:05 ADRIA40 MailScanner[8328]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, > it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st > execute failed: Incorrect string value: '\xF0\x9F\x91\x89\xC2\xA0...' for column > 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm > line 135, line 5803. > > * Frequency after this error appears is about 1-2 times per day. > After this error i get on MailScanner child which is stuck, and i get no new rows into my > maillog MYSQL table. > I have to kill that >stuck< MailScanner child and restart MailScanner, after which my > system is working again with no problems. > > My mailscanner DB into which i am writing has Character set: utf8mb4 and Collation: utf8mb4_general_ci > > Excluding this my mail system is working for years without any problems. > > Can you please help me with this ! > > Thank you all! > > With regards, > > Toma? Novak > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From richard at fastnet.co.uk Wed Jul 6 15:57:12 2016 From: richard at fastnet.co.uk (Richard Mealing) Date: Wed, 6 Jul 2016 15:57:12 +0000 Subject: RBL Checks within mailscanner - no spam scanning Message-ID: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> Hi everyone, I have a request from a client who wants to see all the RBL checks within mailscanner, but they don't want to do any SA spam scanning, just AV scanning. Is this possible? I've never done RBL checks on mailscanner before. I'm wondering how it works. I read somewhere that is quarantines the emails, is that correct? Is there any way to bounce the emails back to the sender? Thanks, Rich -------------- next part -------------- An HTML attachment was scrubbed... URL: From kevin.miller at juneau.org Wed Jul 6 16:43:02 2016 From: kevin.miller at juneau.org (Kevin Miller) Date: Wed, 6 Jul 2016 16:43:02 +0000 Subject: RBL Checks within mailscanner - no spam scanning In-Reply-To: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> Message-ID: You don't want to bounce mail from w/in MailScanner - so much of it (close to all I'd wager) has a forged from address and/or envelope sender address that the bounce will end up going to someone that had nothing to do with the spam. That's a good way to get yourself blacklisted. An old trick of spammers is to send to bogus addresses with a good from address. The spam is bounced to the from address who is the real target, disguised as a non-delivery report. Pretty sleazy. The proper way is to reject at the MTA rather than in MailScanner, as that deals directly with the sending server. ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 From: MailScanner [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] On Behalf Of Richard Mealing Sent: Wednesday, July 06, 2016 7:57 AM To: MailScanner discussion (mailscanner at lists.mailscanner.info) Subject: RBL Checks within mailscanner - no spam scanning Hi everyone, I have a request from a client who wants to see all the RBL checks within mailscanner, but they don't want to do any SA spam scanning, just AV scanning. Is this possible? I've never done RBL checks on mailscanner before. I'm wondering how it works. I read somewhere that is quarantines the emails, is that correct? Is there any way to bounce the emails back to the sender? Thanks, Rich -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailscanner at replies.cyways.com Wed Jul 6 17:15:20 2016 From: mailscanner at replies.cyways.com (Peter Lemieux) Date: Wed, 6 Jul 2016 13:15:20 -0400 Subject: RBL Checks within mailscanner - no spam scanning In-Reply-To: References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> Message-ID: <577D3CA8.3050002@replies.cyways.com> I prefer to let SpamAssassin do the RBL checks since they give the different RBLs varying weights. Using a milter or some other method requires you to make a yes or no decision during the SMTP exchange. Leaving it to SA lets you put the RBL results into a bigger context. However your client's request might work better at the SMTP level though since they only want to use blacklists. So you could use some form of milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn off spam scanning in MailScanner altogether. Alternatively, you could put a copy of /usr/share/spamassassin/72_scores.cf in /etc/mail/spamassassin and set all the scores to zero except for the RBL-related ones. Then you can let MailScanner invoke SpamAssassin and only the RBL scores will apply. I definitely agree with Kevin that bouncing either spam or viruses back to their alleged "senders" is a bad idea. You'll just flood your outbound mail queue with undeliverable messages directed to bogus spamming accounts. Peter On 07/06/2016 12:43 PM, Kevin Miller wrote: > You don?t want to bounce mail from w/in MailScanner ? so much of it (close > to all I?d wager) has a forged from address and/or envelope sender address > that the bounce will end up going to someone that had nothing to do with the > spam. That?s a good way to get yourself blacklisted. An old trick of > spammers is to send to bogus addresses with a good from address. The spam > is bounced to the from address who is the real target, disguised as a > non-delivery report. Pretty sleazy. > > The proper way is to reject at the MTA rather than in MailScanner, as that > deals directly with the sending server. > > ...Kevin > > -- > > Kevin Miller > > Network/email Administrator, CBJ MIS Dept. > > 155 South Seward Street > > Juneau, Alaska 99801 > > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > > *From:*MailScanner > [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] > *On Behalf Of *Richard Mealing > *Sent:* Wednesday, July 06, 2016 7:57 AM > *To:* MailScanner discussion (mailscanner at lists.mailscanner.info) > *Subject:* RBL Checks within mailscanner - no spam scanning > > Hi everyone, > > I have a request from a client who wants to see all the RBL checks within > mailscanner, but they don?t want to do any SA spam scanning, just AV scanning. > > Is this possible? > > I?ve never done RBL checks on mailscanner before. I?m wondering how it > works. I read somewhere that is quarantines the emails, is that correct? Is > there any way to bounce the emails back to the sender? > > Thanks, > > Rich > > > > > From maxsec at gmail.com Wed Jul 6 18:06:55 2016 From: maxsec at gmail.com (Martin Hepworth) Date: Wed, 06 Jul 2016 18:06:55 +0000 Subject: RBL Checks within mailscanner - no spam scanning In-Reply-To: <577D3CA8.3050002@replies.cyways.com> References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> <577D3CA8.3050002@replies.cyways.com> Message-ID: Sure its possible and you can set to a min. Number of rbls before its marked as spam but why is the client asking for this? Seems like youve got a solution to a problem but whats the problem? On Wed, 6 Jul 2016 at 18:13, Peter Lemieux wrote: > I prefer to let SpamAssassin do the RBL checks since they give the > different > RBLs varying weights. Using a milter or some other method requires you to > make a yes or no decision during the SMTP exchange. Leaving it to SA lets > you put the RBL results into a bigger context. > > However your client's request might work better at the SMTP level though > since they only want to use blacklists. So you could use some form of > milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn > off > spam scanning in MailScanner altogether. > > Alternatively, you could put a copy of /usr/share/spamassassin/ > 72_scores.cf > in /etc/mail/spamassassin and set all the scores to zero except for the > RBL-related ones. Then you can let MailScanner invoke SpamAssassin and > only > the RBL scores will apply. > > I definitely agree with Kevin that bouncing either spam or viruses back to > their alleged "senders" is a bad idea. You'll just flood your outbound mail > queue with undeliverable messages directed to bogus spamming accounts. > > Peter > > > On 07/06/2016 12:43 PM, Kevin Miller wrote: > > You don?t want to bounce mail from w/in MailScanner ? so much of it > (close > > to all I?d wager) has a forged from address and/or envelope sender > address > > that the bounce will end up going to someone that had nothing to do with > the > > spam. That?s a good way to get yourself blacklisted. An old trick of > > spammers is to send to bogus addresses with a good from address. The > spam > > is bounced to the from address who is the real target, disguised as a > > non-delivery report. Pretty sleazy. > > > > The proper way is to reject at the MTA rather than in MailScanner, as > that > > deals directly with the sending server. > > > > ...Kevin > > > > -- > > > > Kevin Miller > > > > Network/email Administrator, CBJ MIS Dept. > > > > 155 South Seward Street > > > > Juneau, Alaska 99801 > > > > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: > 307357 > > > > *From:*MailScanner > > [mailto:mailscanner-bounces+kevin.miller= > juneau.org at lists.mailscanner.info] > > *On Behalf Of *Richard Mealing > > *Sent:* Wednesday, July 06, 2016 7:57 AM > > *To:* MailScanner discussion (mailscanner at lists.mailscanner.info) > > *Subject:* RBL Checks within mailscanner - no spam scanning > > > > Hi everyone, > > > > I have a request from a client who wants to see all the RBL checks within > > mailscanner, but they don?t want to do any SA spam scanning, just AV > scanning. > > > > Is this possible? > > > > I?ve never done RBL checks on mailscanner before. I?m wondering how it > > works. I read somewhere that is quarantines the emails, is that correct? > Is > > there any way to bounce the emails back to the sender? > > > > Thanks, > > > > Rich > > > > > > > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jorgeaaq at gmail.com Wed Jul 6 18:59:43 2016 From: jorgeaaq at gmail.com (Jorge Amador Arenas Quezada) Date: Wed, 6 Jul 2016 13:59:43 -0500 Subject: RBL Checks within mailscanner - no spam scanning In-Reply-To: References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> <577D3CA8.3050002@replies.cyways.com> Message-ID: <002001d1d7b8$8f7ad080$ae707180$@gmail.com> Virus Scanning = yes Spam checks = yes Spam List = spamhaus-ZEN spamhaus.org spamhaus-XBL RATS NJABL spamcop.net CBL BARRACUDA JustSpam UCEPROTECT Spam List To Be Spam = 2 Spam List to Reach High Score = 3 Use Spamassassin = no Jorge Arenas From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Martin Hepworth Sent: mi?rcoles, 6 de julio de 2016 01:07 p. m. To: MailScanner Discussion Subject: Re: RBL Checks within mailscanner - no spam scanning Sure its possible and you can set to a min. Number of rbls before its marked as spam but why is the client asking for this? Seems like youve got a solution to a problem but whats the problem? On Wed, 6 Jul 2016 at 18:13, Peter Lemieux > wrote: I prefer to let SpamAssassin do the RBL checks since they give the different RBLs varying weights. Using a milter or some other method requires you to make a yes or no decision during the SMTP exchange. Leaving it to SA lets you put the RBL results into a bigger context. However your client's request might work better at the SMTP level though since they only want to use blacklists. So you could use some form of milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn off spam scanning in MailScanner altogether. Alternatively, you could put a copy of /usr/share/spamassassin/72_scores.cf in /etc/mail/spamassassin and set all the scores to zero except for the RBL-related ones. Then you can let MailScanner invoke SpamAssassin and only the RBL scores will apply. I definitely agree with Kevin that bouncing either spam or viruses back to their alleged "senders" is a bad idea. You'll just flood your outbound mail queue with undeliverable messages directed to bogus spamming accounts. Peter On 07/06/2016 12:43 PM, Kevin Miller wrote: > You don?t want to bounce mail from w/in MailScanner ? so much of it (close > to all I?d wager) has a forged from address and/or envelope sender address > that the bounce will end up going to someone that had nothing to do with the > spam. That?s a good way to get yourself blacklisted. An old trick of > spammers is to send to bogus addresses with a good from address. The spam > is bounced to the from address who is the real target, disguised as a > non-delivery report. Pretty sleazy. > > The proper way is to reject at the MTA rather than in MailScanner, as that > deals directly with the sending server. > > ...Kevin > > -- > > Kevin Miller > > Network/email Administrator, CBJ MIS Dept. > > 155 South Seward Street > > Juneau, Alaska 99801 > > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > > *From:*MailScanner > [mailto:mailscanner-bounces+kevin.miller =juneau.org at lists.mailscanner.info ] > *On Behalf Of *Richard Mealing > *Sent:* Wednesday, July 06, 2016 7:57 AM > *To:* MailScanner discussion (mailscanner at lists.mailscanner.info ) > *Subject:* RBL Checks within mailscanner - no spam scanning > > Hi everyone, > > I have a request from a client who wants to see all the RBL checks within > mailscanner, but they don?t want to do any SA spam scanning, just AV scanning. > > Is this possible? > > I?ve never done RBL checks on mailscanner before. I?m wondering how it > works. I read somewhere that is quarantines the emails, is that correct? Is > there any way to bounce the emails back to the sender? > > Thanks, > > Rich > > > > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From richard at fastnet.co.uk Thu Jul 7 09:22:14 2016 From: richard at fastnet.co.uk (Richard Mealing) Date: Thu, 7 Jul 2016 09:22:14 +0000 Subject: RBL Checks within mailscanner - no spam scanning In-Reply-To: <002001d1d7b8$8f7ad080$ae707180$@gmail.com> References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local> <577D3CA8.3050002@replies.cyways.com> <002001d1d7b8$8f7ad080$ae707180$@gmail.com> Message-ID: <6EE47AF64C339A4F8F7F50507241B3795F5D5A78@BTN-EXCHANGE-V1.fastnet.local> This is a bespoke solution for their helpdesk who want their own servers incoming and outgoing. They don?t have much SSH experience, so I wanted to allow mailscanner to do the RBL checks and possibly quarantine the RBL emails, so they can see this via mailwatch. I?m thinking that this will fill up the drives for the machine, but the drives are going to be pretty large so I don?t think that would be a problem. I might just use the mta to run my rbl checks to be honest, because I know this is the best option, but I thought I would ask the question since I have never tried this before. I want to give them some options but I want to give them the correct options. Or, does anyone know if there is a sendmail plugin that could inject the RBL sql queries into the mailwatch database, or another database I could link to the mailwatch database? Thanks, Rich From: MailScanner [mailto:mailscanner-bounces+richard=fastnet.co.uk at lists.mailscanner.info] On Behalf Of Jorge Amador Arenas Quezada Sent: Wednesday, July 6, 2016 20:00 To: 'MailScanner Discussion' Subject: RE: RBL Checks within mailscanner - no spam scanning Virus Scanning = yes Spam checks = yes Spam List = spamhaus-ZEN spamhaus.org spamhaus-XBL RATS NJABL spamcop.net CBL BARRACUDA JustSpam UCEPROTECT Spam List To Be Spam = 2 Spam List to Reach High Score = 3 Use Spamassassin = no Jorge Arenas From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Martin Hepworth Sent: mi?rcoles, 6 de julio de 2016 01:07 p. m. To: MailScanner Discussion > Subject: Re: RBL Checks within mailscanner - no spam scanning Sure its possible and you can set to a min. Number of rbls before its marked as spam but why is the client asking for this? Seems like youve got a solution to a problem but whats the problem? On Wed, 6 Jul 2016 at 18:13, Peter Lemieux > wrote: I prefer to let SpamAssassin do the RBL checks since they give the different RBLs varying weights. Using a milter or some other method requires you to make a yes or no decision during the SMTP exchange. Leaving it to SA lets you put the RBL results into a bigger context. However your client's request might work better at the SMTP level though since they only want to use blacklists. So you could use some form of milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn off spam scanning in MailScanner altogether. Alternatively, you could put a copy of /usr/share/spamassassin/72_scores.cf in /etc/mail/spamassassin and set all the scores to zero except for the RBL-related ones. Then you can let MailScanner invoke SpamAssassin and only the RBL scores will apply. I definitely agree with Kevin that bouncing either spam or viruses back to their alleged "senders" is a bad idea. You'll just flood your outbound mail queue with undeliverable messages directed to bogus spamming accounts. Peter On 07/06/2016 12:43 PM, Kevin Miller wrote: > You don?t want to bounce mail from w/in MailScanner ? so much of it (close > to all I?d wager) has a forged from address and/or envelope sender address > that the bounce will end up going to someone that had nothing to do with the > spam. That?s a good way to get yourself blacklisted. An old trick of > spammers is to send to bogus addresses with a good from address. The spam > is bounced to the from address who is the real target, disguised as a > non-delivery report. Pretty sleazy. > > The proper way is to reject at the MTA rather than in MailScanner, as that > deals directly with the sending server. > > ...Kevin > > -- > > Kevin Miller > > Network/email Administrator, CBJ MIS Dept. > > 155 South Seward Street > > Juneau, Alaska 99801 > > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > > *From:*MailScanner > [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] > *On Behalf Of *Richard Mealing > *Sent:* Wednesday, July 06, 2016 7:57 AM > *To:* MailScanner discussion (mailscanner at lists.mailscanner.info) > *Subject:* RBL Checks within mailscanner - no spam scanning > > Hi everyone, > > I have a request from a client who wants to see all the RBL checks within > mailscanner, but they don?t want to do any SA spam scanning, just AV scanning. > > Is this possible? > > I?ve never done RBL checks on mailscanner before. I?m wondering how it > works. I read somewhere that is quarantines the emails, is that correct? Is > there any way to bounce the emails back to the sender? > > Thanks, > > Rich > > > > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From NOVAK.TOMAZ at adria-mobil.si Fri Jul 8 07:49:35 2016 From: NOVAK.TOMAZ at adria-mobil.si (=?iso-8859-2?Q?NOVAK_TOMA=AE?=) Date: Fri, 8 Jul 2016 07:49:35 +0000 Subject: MailScanner after restarting itself SpamAssasin stops working Message-ID: <6EE6CBB68B02804781F8CF38D3F0E4730167B95B@ADRIA22.adria-mobil.si> Hi! I have a problem, after MailScanner restarts himself i get this: Jul 08 07:00:11 server MailScanner[30506]: Could not use Custom Function code /usr/share/MailScanner/perl/custom/MailWatch.pm, it could not be "require"d. Make sure the last line is "1;" and the module is correct with perl -wc (Error: Can't locate Storable.pm: Permission denied at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25.) Jul 08 07:00:11 server MailScanner[30506]: BEGIN failed--compilation aborted at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25. Jul 08 07:00:11 server MailScanner[30506]: Compilation failed in require at /usr/share/MailScanner/perl/MailScanner/Config.pm line 752. Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file /etc/MailScanner/MailScanner.conf Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file /etc/MailScanner/conf.d/README Jul 08 07:00:11 server MailScanner[30506]: Read 501 hostnames from the phishing whitelist Jul 08 07:00:11 server MailScanner[30506]: Read 15915 hostnames from the phishing blacklists Jul 08 07:00:11 server MailScanner[30506]: Config: calling custom init function MailWatchLogging Jul 08 07:00:11 server MailScanner[30506]: You want to use SpamAssassin but have not installed it. Jul 08 07:00:11 server MailScanner[30506]: I will run without SpamAssassin for now, you will not detect much spam until you install SpamAssassin. perl -wc /usr/share/MailScanner/perl/custom/MailWatch.pm returns no errors (it is working after manual restart of MailScanner as root or postfix user). After that MailScanner works, email flow works, but it is not checked with SpamAssasin. What is going on here ? I get the same if i restart MailScanner from cron with: /etc/init.d/./mailscanner restart or /usr/sbin/ms-update-sa But if i run /usr/sbin/ms-update-sa or /etc/init.d/./mailscanner restart manualy as root, MailScanner restarts itself without any problems. My software versions: MailScanner Version = 5.0.2 PHP Version = 5.5.14 MySQL Version = 5.6.30 What am i doing wrong, i can not figure it out :( -------------- next part -------------- An HTML attachment was scrubbed... URL: From sistemisti-posta at csi.it Fri Jul 8 07:00:52 2016 From: sistemisti-posta at csi.it (Sistemisti Posta) Date: Fri, 8 Jul 2016 09:00:52 +0200 Subject: [Help] scamnailer with Clamav FP Message-ID: <4b991a7a-00f2-5bb0-d5af-27b6f2bf68ed@csi.it> Hello, I use scamnailer.ndb with Clamav: http://www.scamnailer.info/documentation.html During last days I experience many false positives with @beniculturali.it domain. I checked with beniculturali.it's admins, and it doesn't seem that they are currently victim of phishing or email spoofing. Could you try to remove the beniculturali.it addresses from the list? Thank you very much Marco From rcooper at dwford.com Fri Jul 8 15:19:57 2016 From: rcooper at dwford.com (Rick Cooper) Date: Fri, 8 Jul 2016 11:19:57 -0400 Subject: MailScanner after restarting itself SpamAssasin stops working In-Reply-To: <6EE6CBB68B02804781F8CF38D3F0E4730167B95B@ADRIA22.adria-mobil.si> References: <6EE6CBB68B02804781F8CF38D3F0E4730167B95B@ADRIA22.adria-mobil.si> Message-ID: <04C03DFB136944C5A594E452A2CCED3E@SAHOMELT> It would appear the storable perl module is not installed. Install (package or cpan -i Storable) it and try again Rick _____ From: MailScanner [mailto:mailscanner-bounces+rcooper=dwford.com at lists.mailscanner.info] On Behalf Of NOVAK TOMA? Sent: Friday, July 08, 2016 3:50 AM To: mailscanner at lists.mailscanner.info Subject: MailScanner after restarting itself SpamAssasin stops working Hi! I have a problem, after MailScanner restarts himself i get this: Jul 08 07:00:11 server MailScanner[30506]: Could not use Custom Function code /usr/share/MailScanner/perl/custom/MailWatch.pm, it could not be "require"d. Make sure the last line is "1;" and the module is correct with perl -wc (Error: Can't locate Storable.pm: Permission denied at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25.) Jul 08 07:00:11 server MailScanner[30506]: BEGIN failed--compilation aborted at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25. Jul 08 07:00:11 server MailScanner[30506]: Compilation failed in require at /usr/share/MailScanner/perl/MailScanner/Config.pm line 752. Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file /etc/MailScanner/MailScanner.conf Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file /etc/MailScanner/conf.d/README Jul 08 07:00:11 server MailScanner[30506]: Read 501 hostnames from the phishing whitelist Jul 08 07:00:11 server MailScanner[30506]: Read 15915 hostnames from the phishing blacklists Jul 08 07:00:11 server MailScanner[30506]: Config: calling custom init function MailWatchLogging Jul 08 07:00:11 server MailScanner[30506]: You want to use SpamAssassin but have not installed it. Jul 08 07:00:11 server MailScanner[30506]: I will run without SpamAssassin for now, you will not detect much spam until you install SpamAssassin. perl -wc /usr/share/MailScanner/perl/custom/MailWatch.pm returns no errors (it is working after manual restart of MailScanner as root or postfix user). After that MailScanner works, email flow works, but it is not checked with SpamAssasin. What is going on here ? I get the same if i restart MailScanner from cron with: /etc/init.d/./mailscanner restart or /usr/sbin/ms-update-sa But if i run /usr/sbin/ms-update-sa or /etc/init.d/./mailscanner restart manualy as root, MailScanner restarts itself without any problems. My software versions: MailScanner Version = 5.0.2 PHP Version = 5.5.14 MySQL Version = 5.6.30 What am i doing wrong, i can not figure it out L -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at msapiro.net Sat Jul 9 02:26:54 2016 From: mark at msapiro.net (Mark Sapiro) Date: Fri, 8 Jul 2016 19:26:54 -0700 Subject: [Help] scamnailer with Clamav FP In-Reply-To: <4b991a7a-00f2-5bb0-d5af-27b6f2bf68ed@csi.it> References: <4b991a7a-00f2-5bb0-d5af-27b6f2bf68ed@csi.it> Message-ID: <87798392-415d-1fee-04db-efdfbbdcc9fb@msapiro.net> On 7/8/16 12:00 AM, Sistemisti Posta wrote: > Hello, > > I use scamnailer.ndb with Clamav: > > http://www.scamnailer.info/documentation.html > > During last days I experience many false positives with > @beniculturali.it domain. > > I checked with beniculturali.it's admins, and it doesn't seem that they > are currently victim of phishing or email spoofing. > > Could you try to remove the beniculturali.it addresses from the list? The short answer is No. Longer answer. There are two ways to use ScamNailer. One is with a set of SpamAssassin rules (ScamNailer.cf) and the other is with ClamAV signatures (scamnailer.ndb). These two ways have different implications in MailScanner becaust one is a SpamAssassin score, and the other is an 'unofficial' virus detection. Originally, the data for these came from some proprietary source and was maintained by Jules and there are scripts at to produce ScamNailer.cf and scamnailer.ndb from Jules data. The latter script doesn't produce scamnailer.ndb; it just downloads it. There is also a 'still updated by some process unknown to me' scamnailer.ndb at and also distributed by sanesecurity.com. Over the years, the source of the data for the script has proven unreliable so I refactored that script to use the data from . That also contains @beniculturali.it addresses. See for ways to contact that project. The current version of that script is distributed with MailScanner and is at . The data at may also be the source of the scamnailer.ndb files, but this is unknown to me. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From jerry.benton at mailborder.com Sun Jul 24 05:12:17 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sat, 23 Jul 2016 22:12:17 -0700 Subject: List Check Message-ID: Just checking to see if this thing is still working. Been quite lately. - Jerry Benton www.mailborder.com +1 - 844-436-6245 From alex at vidadigital.com.pa Sun Jul 24 05:12:41 2016 From: alex at vidadigital.com.pa (Alex Neuman van der Hans) Date: Sun, 24 Jul 2016 00:12:41 -0500 Subject: List Check In-Reply-To: References: Message-ID: Working? Alex Neuman van der Hans Producer/Host, Vida Digital +1 (440) 253-9789 | +507 6781-9505 | Panama |alex at vidadigital.com.pa | http://vidadigital.com.pa/ |Skype: alexneuman > On Jul 24, 2016, at 12:12 AM, Jerry Benton wrote: > > Just checking to see if this thing is still working. Been quite lately. > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Sun Jul 24 05:13:11 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sat, 23 Jul 2016 22:13:11 -0700 Subject: List Check In-Reply-To: References: Message-ID: Yay - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Alex Neuman van der Hans Reply:?MailScanner Discussion Date:?July 24, 2016 at 1:12:51 AM To:?MailScanner discussion Subject:? Re: List Check > Working? > > > Alex Neuman van der Hans Producer/Host, Vida Digital > +1 (440) 253-9789 | +507 6781-9505 | Panama > |alex at vidadigital.com.pa | http://vidadigital.com.pa/ > |Skype: alexneuman > > > > > > > > > > On Jul 24, 2016, at 12:12 AM, Jerry Benton wrote: > > > > Just checking to see if this thing is still working. Been quite lately. > > > > > > - > > Jerry Benton > > www.mailborder.com > > +1 - 844-436-6245 > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From steveb_clamav at sanesecurity.com Sun Jul 24 06:13:10 2016 From: steveb_clamav at sanesecurity.com (Steve basford) Date: Sun, 24 Jul 2016 07:13:10 +0100 Subject: List Check In-Reply-To: References: Message-ID: <1561b892cf0.27d5.3eaa884a23ece66aada06ae82ee56aba@sanesecurity.com> On 24 July 2016 06:13:04 Jerry Benton wrote: > Just checking to see if this thing is still >working. Been quite lately. If it's not working... turn if off and on again... Cheers, Steve Web: sanesecurity.com Twitter: @sanesecurity From jorgeaaq at gmail.com Sun Jul 24 16:55:27 2016 From: jorgeaaq at gmail.com (Jorge Arenas) Date: Sun, 24 Jul 2016 11:55:27 -0500 Subject: List Check In-Reply-To: <1561b892cf0.27d5.3eaa884a23ece66aada06ae82ee56aba@sanesecurity.com> References: <1561b892cf0.27d5.3eaa884a23ece66aada06ae82ee56aba@sanesecurity.com> Message-ID: <5794f312.25249d0a.3e5b9.5eee@mx.google.com> Maybe everything is working fine I am afraid, I am going to jinx it Atte Jorge A Arenas Quezada CSA Consultores De: Steve basford -------------- next part -------------- An HTML attachment was scrubbed... URL: From Eoin.Kim at rcst.com.au Sun Jul 24 23:10:28 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:10:28 +0000 Subject: MailScanner --lint %org-name% not importing Message-ID: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> Hi, I am not sure if it is the desired behaviour but my MailScanner doesn't import my configuration setting. I made site-specific configuration file inside /etc/MailScanner/conf.d directory and inside that file I set %org-name%. However, when I run MailScanner --lint, I get this error: *************************************************************** sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf Read 501 hostnames from the phishing whitelist Read 15359 hostnames from the phishing blacklists Config: calling custom init function SQLWhitelist Starting up SQL Whitelist Read 0 whitelist entries Config: calling custom init function MailWatchLogging Started SQL Logging child Config: calling custom init function SQLBlacklist Starting up SQL Blacklist Read 0 blacklist entries Checking version numbers... Version number in MailScanner.conf (5.0.2) is correct. ERROR: The "envelope_sender_header" in your spamassassin.conf ERROR: is not correct, it should match X-yoursite-MailScanner-From MailScanner setting GID to (1001) MailScanner setting UID to (106) Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database pyzor: check failed: internal error, python traceback seen in response SpamAssassin reported no errors. Auto: Found virus scanners: clamd Connected to Processing Attempts Database Created Processing Attempts Database successfully There are 0 messages in the Processing Attempts Database Using locktype = posix MailScanner.conf says "Virus Scanners = auto" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Eicar-Test-Signature" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function SQLWhitelist Closing down SQL Whitelist Config: calling custom end function MailWatchLogging Config: calling custom end function SQLBlacklist Closing down SQL Blacklist *************************************************************** So, obviously it reads my site-specific configuration file but it keeps showing that error message regarding envelope_sender_header setting. When I change %org-name% in the /etc/MailScanner/MailScanner.conf file same as my site-specific setting, the error message goes away. I believe this is a bug? Or Am I doing something wrong? Thanks a lot. Eoin Kim Systems Administrator RCS Telecommunications Level 1, 133 Mary Street Brisbane, QLD, 4000 Office: 07 3228 0843 Mobile: 0419 726 231 Email: eoin.kim at rcst.com.au [RCST logo drop shadow] -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.jpg Type: image/jpeg Size: 3384 bytes Desc: image001.jpg URL: From jerry.benton at mailborder.com Sun Jul 24 23:13:47 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 24 Jul 2016 16:13:47 -0700 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> Message-ID: The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:10:54 PM To:?mailscanner at lists.mailscanner.info Subject:? MailScanner --lint %org-name% not importing > Hi, > > I am not sure if it is the desired behaviour but my MailScanner doesn't import my configuration > setting. > > I made site-specific configuration file inside /etc/MailScanner/conf.d directory > and inside that file I set %org-name%. However, when I run MailScanner --lint, I get this > error: > > *************************************************************** > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf > Read 501 hostnames from the phishing whitelist > Read 15359 hostnames from the phishing blacklists > Config: calling custom init function SQLWhitelist > Starting up SQL Whitelist > Read 0 whitelist entries > Config: calling custom init function MailWatchLogging > Started SQL Logging child > Config: calling custom init function SQLBlacklist > Starting up SQL Blacklist > Read 0 blacklist entries > > Checking version numbers... > Version number in MailScanner.conf (5.0.2) is correct. > > ERROR: The "envelope_sender_header" in your spamassassin.conf > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > MailScanner setting GID to (1001) > MailScanner setting UID to (106) > > Checking for SpamAssassin errors (if you use it)... > Using SpamAssassin results cache > Connected to SpamAssassin cache database > pyzor: check failed: internal error, python traceback seen in response > SpamAssassin reported no errors. > Auto: Found virus scanners: clamd > Connected to Processing Attempts Database > Created Processing Attempts Database successfully > There are 0 messages in the Processing Attempts Database > Using locktype = posix > MailScanner.conf says "Virus Scanners = auto" > Found these virus scanners installed: clamd > =========================================================================== > Filename Checks: Windows/DOS Executable (1 eicar.com) > Other Checks: Found 1 problems > Virus and Content Scanning: Starting > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com > Virus Scanning: Clamd found 2 infections > Infected message 1 came from 10.1.1.1 > Virus Scanning: Found 2 viruses > =========================================================================== > Virus Scanner test reports: > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > If any of your virus scanners (clamd) > are not listed there, you should check that they are installed correctly > and that MailScanner is finding them correctly via its virus.scanners.conf. > Config: calling custom end function SQLWhitelist > Closing down SQL Whitelist > Config: calling custom end function MailWatchLogging > Config: calling custom end function SQLBlacklist > Closing down SQL Blacklist > > *************************************************************** > > So, obviously it reads my site-specific configuration file but it keeps showing that > error message regarding envelope_sender_header setting. When I change %org-name% > in the /etc/MailScanner/MailScanner.conf file same as my site-specific setting, > the error message goes away. I believe this is a bug? Or Am I doing something wrong? Thanks > a lot. > > Eoin Kim > Systems Administrator > > RCS Telecommunications > Level 1, 133 Mary Street > Brisbane, QLD, 4000 > Office: 07 3228 0843 > Mobile: 0419 726 231 > Email: eoin.kim at rcst.com.au > > [RCST logo drop shadow] > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From Eoin.Kim at rcst.com.au Sun Jul 24 23:17:10 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:17:10 +0000 Subject: MailScanner --lint %org-name% not importing In-Reply-To: References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> Message-ID: <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> Hello Jerry, Sorry but I don't understand what you said. Such a tiny information to me. I have spamassassin.conf file in /etc/MailScanner directory which is linked to /etc/spamassassin/MailScanner.cf file. So, if I change spamassassin.conf file, it should just work, correct? Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton Sent: Monday, 25 July 2016 9:14 AM To: MailScanner Discussion Subject: Re: MailScanner --lint %org-name% not importing The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:10:54 PM To:?mailscanner at lists.mailscanner.info Subject:? MailScanner --lint %org-name% not importing > Hi, > > I am not sure if it is the desired behaviour but my MailScanner > doesn't import my configuration setting. > > I made site-specific configuration file inside /etc/MailScanner/conf.d > directory and inside that file I set %org-name%. However, when I run > MailScanner --lint, I get this > error: > > *************************************************************** > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to > setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf Reading > configuration file /etc/MailScanner/conf.d/mynetwork.conf > Read 501 hostnames from the phishing whitelist Read 15359 hostnames > from the phishing blacklists > Config: calling custom init function SQLWhitelist Starting up SQL > Whitelist Read 0 whitelist entries > Config: calling custom init function MailWatchLogging Started SQL > Logging child > Config: calling custom init function SQLBlacklist Starting up SQL > Blacklist Read 0 blacklist entries > > Checking version numbers... > Version number in MailScanner.conf (5.0.2) is correct. > > ERROR: The "envelope_sender_header" in your spamassassin.conf > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > MailScanner setting GID to (1001) > MailScanner setting UID to (106) > > Checking for SpamAssassin errors (if you use it)... > Using SpamAssassin results cache > Connected to SpamAssassin cache database > pyzor: check failed: internal error, python traceback seen in response > SpamAssassin reported no errors. > Auto: Found virus scanners: clamd > Connected to Processing Attempts Database Created Processing Attempts > Database successfully There are 0 messages in the Processing Attempts > Database Using locktype = posix MailScanner.conf says "Virus Scanners > = auto" > Found these virus scanners installed: clamd > ====================================================================== > ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other > Checks: Found 1 problems Virus and Content Scanning: Starting > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > Scanning: Clamd found 2 infections Infected message 1 came from > 10.1.1.1 Virus Scanning: Found 2 viruses > ====================================================================== > ===== > Virus Scanner test reports: > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > If any of your virus scanners (clamd) > are not listed there, you should check that they are installed > correctly and that MailScanner is finding them correctly via its virus.scanners.conf. > Config: calling custom end function SQLWhitelist Closing down SQL > Whitelist > Config: calling custom end function MailWatchLogging > Config: calling custom end function SQLBlacklist Closing down SQL > Blacklist > > *************************************************************** > > So, obviously it reads my site-specific configuration file but it > keeps showing that error message regarding envelope_sender_header > setting. When I change %org-name% in the > /etc/MailScanner/MailScanner.conf file same as my site-specific > setting, the error message goes away. I believe this is a bug? Or Am I doing something wrong? Thanks a lot. > > Eoin Kim > Systems Administrator > > RCS Telecommunications > Level 1, 133 Mary Street > Brisbane, QLD, 4000 > Office: 07 3228 0843 > Mobile: 0419 726 231 > Email: eoin.kim at rcst.com.au > > [RCST logo drop shadow] > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From jerry.benton at mailborder.com Sun Jul 24 23:18:51 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 24 Jul 2016 16:18:51 -0700 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> Message-ID: Edit /etc/MailScanner/spamassassin.conf find:?envelope_sender_header Change it to match what the MailScanner --lint is telling you to change it to. - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:17:25 PM To:?MailScanner Discussion Subject:? RE: MailScanner --lint %org-name% not importing > Hello Jerry, > > Sorry but I don't understand what you said. Such a tiny information to me. I have spamassassin.conf > file in /etc/MailScanner directory which is linked to /etc/spamassassin/MailScanner.cf > file. So, if I change spamassassin.conf file, it should just work, correct? > > Eoin > > -----Original Message----- > From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] > On Behalf Of Jerry Benton > Sent: Monday, 25 July 2016 9:14 AM > To: MailScanner Discussion > Subject: Re: MailScanner --lint %org-name% not importing > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -----Original Message----- > From: Eoin Kim > Reply: MailScanner Discussion > Date: July 24, 2016 at 7:10:54 PM > To: mailscanner at lists.mailscanner.info > Subject: MailScanner --lint %org-name% not importing > > > Hi, > > > > I am not sure if it is the desired behaviour but my MailScanner > > doesn't import my configuration setting. > > > > I made site-specific configuration file inside /etc/MailScanner/conf.d > > directory and inside that file I set %org-name%. However, when I run > > MailScanner --lint, I get this > > error: > > > > *************************************************************** > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to > > setlogsock(unix) > > > > Reading configuration file /etc/MailScanner/MailScanner.conf Reading > > configuration file /etc/MailScanner/conf.d/mynetwork.conf > > Read 501 hostnames from the phishing whitelist Read 15359 hostnames > > from the phishing blacklists > > Config: calling custom init function SQLWhitelist Starting up SQL > > Whitelist Read 0 whitelist entries > > Config: calling custom init function MailWatchLogging Started SQL > > Logging child > > Config: calling custom init function SQLBlacklist Starting up SQL > > Blacklist Read 0 blacklist entries > > > > Checking version numbers... > > Version number in MailScanner.conf (5.0.2) is correct. > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > MailScanner setting GID to (1001) > > MailScanner setting UID to (106) > > > > Checking for SpamAssassin errors (if you use it)... > > Using SpamAssassin results cache > > Connected to SpamAssassin cache database > > pyzor: check failed: internal error, python traceback seen in response > > SpamAssassin reported no errors. > > Auto: Found virus scanners: clamd > > Connected to Processing Attempts Database Created Processing Attempts > > Database successfully There are 0 messages in the Processing Attempts > > Database Using locktype = posix MailScanner.conf says "Virus Scanners > > = auto" > > Found these virus scanners installed: clamd > > ====================================================================== > > ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other > > Checks: Found 1 problems Virus and Content Scanning: Starting > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > > Scanning: Clamd found 2 infections Infected message 1 came from > > 10.1.1.1 Virus Scanning: Found 2 viruses > > ====================================================================== > > ===== > > Virus Scanner test reports: > > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > > > If any of your virus scanners (clamd) > > are not listed there, you should check that they are installed > > correctly and that MailScanner is finding them correctly via its virus.scanners.conf. > > Config: calling custom end function SQLWhitelist Closing down SQL > > Whitelist > > Config: calling custom end function MailWatchLogging > > Config: calling custom end function SQLBlacklist Closing down SQL > > Blacklist > > > > *************************************************************** > > > > So, obviously it reads my site-specific configuration file but it > > keeps showing that error message regarding envelope_sender_header > > setting. When I change %org-name% in the > > /etc/MailScanner/MailScanner.conf file same as my site-specific > > setting, the error message goes away. I believe this is a bug? Or Am I doing something > wrong? Thanks a lot. > > > > Eoin Kim > > Systems Administrator > > > > RCS Telecommunications > > Level 1, 133 Mary Street > > Brisbane, QLD, 4000 > > Office: 07 3228 0843 > > Mobile: 0419 726 231 > > Email: eoin.kim at rcst.com.au > > > > [RCST logo drop shadow] > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From Eoin.Kim at rcst.com.au Sun Jul 24 23:24:33 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:24:33 +0000 Subject: MailScanner --lint %org-name% not importing In-Reply-To: References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> Message-ID: <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn> Jerry, So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside that file %org-name% = mynetwork. And I changed /etc/MailScanner/spamassassin.conf file like below: envelope_sender_header X-mynetwork-MailScanner-From And I also have a file /etc/MailScanner/MailScanner.conf which has this setting by default %org-name% = yoursite. Now, when I run 'MailScanner --lint' this happens: Checking version numbers... Version number in MailScanner.conf (5.0.2) is correct. ERROR: The "envelope_sender_header" in your spamassassin.conf ERROR: is not correct, it should match X-yoursite-MailScanner-From MailScanner setting GID to (1001) MailScanner setting UID to (106) [ ... ] If I am right, I already did what you said. But no hope. Am I missing something? Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton Sent: Monday, 25 July 2016 9:19 AM To: MailScanner Discussion Subject: RE: MailScanner --lint %org-name% not importing Edit /etc/MailScanner/spamassassin.conf find:?envelope_sender_header Change it to match what the MailScanner --lint is telling you to change it to. - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:17:25 PM To:?MailScanner Discussion Subject:? RE: MailScanner --lint %org-name% not importing > Hello Jerry, > > Sorry but I don't understand what you said. Such a tiny information to > me. I have spamassassin.conf file in /etc/MailScanner directory which > is linked to /etc/spamassassin/MailScanner.cf file. So, if I change spamassassin.conf file, it should just work, correct? > > Eoin > > -----Original Message----- > From: MailScanner > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf > o] > On Behalf Of Jerry Benton > Sent: Monday, 25 July 2016 9:14 AM > To: MailScanner Discussion > Subject: Re: MailScanner --lint %org-name% not importing > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -----Original Message----- > From: Eoin Kim > Reply: MailScanner Discussion > Date: July 24, 2016 at 7:10:54 PM > To: mailscanner at lists.mailscanner.info > Subject: MailScanner --lint %org-name% not importing > > > Hi, > > > > I am not sure if it is the desired behaviour but my MailScanner > > doesn't import my configuration setting. > > > > I made site-specific configuration file inside > > /etc/MailScanner/conf.d directory and inside that file I set > > %org-name%. However, when I run MailScanner --lint, I get this > > error: > > > > *************************************************************** > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying > > to > > setlogsock(unix) > > > > Reading configuration file /etc/MailScanner/MailScanner.conf Reading > > configuration file /etc/MailScanner/conf.d/mynetwork.conf > > Read 501 hostnames from the phishing whitelist Read 15359 hostnames > > from the phishing blacklists > > Config: calling custom init function SQLWhitelist Starting up SQL > > Whitelist Read 0 whitelist entries > > Config: calling custom init function MailWatchLogging Started SQL > > Logging child > > Config: calling custom init function SQLBlacklist Starting up SQL > > Blacklist Read 0 blacklist entries > > > > Checking version numbers... > > Version number in MailScanner.conf (5.0.2) is correct. > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > MailScanner setting GID to (1001) > > MailScanner setting UID to (106) > > > > Checking for SpamAssassin errors (if you use it)... > > Using SpamAssassin results cache > > Connected to SpamAssassin cache database > > pyzor: check failed: internal error, python traceback seen in > > response SpamAssassin reported no errors. > > Auto: Found virus scanners: clamd > > Connected to Processing Attempts Database Created Processing > > Attempts Database successfully There are 0 messages in the > > Processing Attempts Database Using locktype = posix MailScanner.conf > > says "Virus Scanners = auto" > > Found these virus scanners installed: clamd > > ==================================================================== > > == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other > > Checks: Found 1 problems Virus and Content Scanning: Starting > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > > Scanning: Clamd found 2 infections Infected message 1 came from > > 10.1.1.1 Virus Scanning: Found 2 viruses > > ==================================================================== > > == > > ===== > > Virus Scanner test reports: > > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > > > If any of your virus scanners (clamd) are not listed there, you > > should check that they are installed correctly and that MailScanner > > is finding them correctly via its virus.scanners.conf. > > Config: calling custom end function SQLWhitelist Closing down SQL > > Whitelist > > Config: calling custom end function MailWatchLogging > > Config: calling custom end function SQLBlacklist Closing down SQL > > Blacklist > > > > *************************************************************** > > > > So, obviously it reads my site-specific configuration file but it > > keeps showing that error message regarding envelope_sender_header > > setting. When I change %org-name% in the > > /etc/MailScanner/MailScanner.conf file same as my site-specific > > setting, the error message goes away. I believe this is a bug? Or Am > > I doing something > wrong? Thanks a lot. > > > > Eoin Kim > > Systems Administrator > > > > RCS Telecommunications > > Level 1, 133 Mary Street > > Brisbane, QLD, 4000 > > Office: 07 3228 0843 > > Mobile: 0419 726 231 > > Email: eoin.kim at rcst.com.au > > > > [RCST logo drop shadow] > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From jerry.benton at mailborder.com Sun Jul 24 23:27:05 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 24 Jul 2016 16:27:05 -0700 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn> Message-ID: This should be at the end of /etc/MailScanner/MailScanner.conf # # # Include conf.d files automatically, so you can override any of the # items set above with settings in your own local configuration files. # They will be read and processed in alphabetical order. # # include /etc/MailScanner/conf.d/* # End Of File - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:24:52 PM To:?MailScanner Discussion Subject:? RE: MailScanner --lint %org-name% not importing > Jerry, > > So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside that file %org-name% > = mynetwork. And I changed /etc/MailScanner/spamassassin.conf file like below: > > envelope_sender_header X-mynetwork-MailScanner-From > > And I also have a file /etc/MailScanner/MailScanner.conf which has this setting by > default %org-name% = yoursite. > > Now, when I run 'MailScanner --lint' this happens: > > Checking version numbers... > Version number in MailScanner.conf (5.0.2) is correct. > > ERROR: The "envelope_sender_header" in your spamassassin.conf > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > MailScanner setting GID to (1001) > MailScanner setting UID to (106) > > [ ... ] > > If I am right, I already did what you said. But no hope. Am I missing something? > > Eoin > > -----Original Message----- > From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] > On Behalf Of Jerry Benton > Sent: Monday, 25 July 2016 9:19 AM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > Edit /etc/MailScanner/spamassassin.conf > > find: envelope_sender_header > > Change it to match what the MailScanner --lint is telling you to change it to. > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -----Original Message----- > From: Eoin Kim > Reply: MailScanner Discussion > Date: July 24, 2016 at 7:17:25 PM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > > Hello Jerry, > > > > Sorry but I don't understand what you said. Such a tiny information to > > me. I have spamassassin.conf file in /etc/MailScanner directory which > > is linked to /etc/spamassassin/MailScanner.cf file. So, if I change spamassassin.conf > file, it should just work, correct? > > > > Eoin > > > > -----Original Message----- > > From: MailScanner > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf > > o] > > On Behalf Of Jerry Benton > > Sent: Monday, 25 July 2016 9:14 AM > > To: MailScanner Discussion > > Subject: Re: MailScanner --lint %org-name% not importing > > > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. > > > > > > - > > Jerry Benton > > www.mailborder.com > > +1 - 844-436-6245 > > > > > > -----Original Message----- > > From: Eoin Kim > > Reply: MailScanner Discussion > > Date: July 24, 2016 at 7:10:54 PM > > To: mailscanner at lists.mailscanner.info > > Subject: MailScanner --lint %org-name% not importing > > > > > Hi, > > > > > > I am not sure if it is the desired behaviour but my MailScanner > > > doesn't import my configuration setting. > > > > > > I made site-specific configuration file inside > > > /etc/MailScanner/conf.d directory and inside that file I set > > > %org-name%. However, when I run MailScanner --lint, I get this > > > error: > > > > > > *************************************************************** > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying > > > to > > > setlogsock(unix) > > > > > > Reading configuration file /etc/MailScanner/MailScanner.conf Reading > > > configuration file /etc/MailScanner/conf.d/mynetwork.conf > > > Read 501 hostnames from the phishing whitelist Read 15359 hostnames > > > from the phishing blacklists > > > Config: calling custom init function SQLWhitelist Starting up SQL > > > Whitelist Read 0 whitelist entries > > > Config: calling custom init function MailWatchLogging Started SQL > > > Logging child > > > Config: calling custom init function SQLBlacklist Starting up SQL > > > Blacklist Read 0 blacklist entries > > > > > > Checking version numbers... > > > Version number in MailScanner.conf (5.0.2) is correct. > > > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > > > MailScanner setting GID to (1001) > > > MailScanner setting UID to (106) > > > > > > Checking for SpamAssassin errors (if you use it)... > > > Using SpamAssassin results cache > > > Connected to SpamAssassin cache database > > > pyzor: check failed: internal error, python traceback seen in > > > response SpamAssassin reported no errors. > > > Auto: Found virus scanners: clamd > > > Connected to Processing Attempts Database Created Processing > > > Attempts Database successfully There are 0 messages in the > > > Processing Attempts Database Using locktype = posix MailScanner.conf > > > says "Virus Scanners = auto" > > > Found these virus scanners installed: clamd > > > ==================================================================== > > > == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other > > > Checks: Found 1 problems Virus and Content Scanning: Starting > > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > > > Scanning: Clamd found 2 infections Infected message 1 came from > > > 10.1.1.1 Virus Scanning: Found 2 viruses > > > ==================================================================== > > > == > > > ===== > > > Virus Scanner test reports: > > > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > > > > > If any of your virus scanners (clamd) are not listed there, you > > > should check that they are installed correctly and that MailScanner > > > is finding them correctly via its virus.scanners.conf. > > > Config: calling custom end function SQLWhitelist Closing down SQL > > > Whitelist > > > Config: calling custom end function MailWatchLogging > > > Config: calling custom end function SQLBlacklist Closing down SQL > > > Blacklist > > > > > > *************************************************************** > > > > > > So, obviously it reads my site-specific configuration file but it > > > keeps showing that error message regarding envelope_sender_header > > > setting. When I change %org-name% in the > > > /etc/MailScanner/MailScanner.conf file same as my site-specific > > > setting, the error message goes away. I believe this is a bug? Or Am > > > I doing something > > wrong? Thanks a lot. > > > > > > Eoin Kim > > > Systems Administrator > > > > > > RCS Telecommunications > > > Level 1, 133 Mary Street > > > Brisbane, QLD, 4000 > > > Office: 07 3228 0843 > > > Mobile: 0419 726 231 > > > Email: eoin.kim at rcst.com.au > > > > > > [RCST logo drop shadow] > > > > > > > > > > > > -- > > > MailScanner mailing list > > > mailscanner at lists.mailscanner.info > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From Eoin.Kim at rcst.com.au Sun Jul 24 23:28:53 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:28:53 +0000 Subject: MailScanner --lint %org-name% not importing In-Reply-To: References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn> Message-ID: Yes, I do have except I changed it like this: include /etc/MailScanner/conf.d/*.conf. Does this make a problem? I'll test it now. Thanks. Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton Sent: Monday, 25 July 2016 9:27 AM To: MailScanner Discussion Subject: RE: MailScanner --lint %org-name% not importing This should be at the end of /etc/MailScanner/MailScanner.conf # # # Include conf.d files automatically, so you can override any of the # items set above with settings in your own local configuration files. # They will be read and processed in alphabetical order. # # include /etc/MailScanner/conf.d/* # End Of File - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:24:52 PM To:?MailScanner Discussion Subject:? RE: MailScanner --lint %org-name% not importing > Jerry, > > So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside > that file %org-name% = mynetwork. And I changed /etc/MailScanner/spamassassin.conf file like below: > > envelope_sender_header X-mynetwork-MailScanner-From > > And I also have a file /etc/MailScanner/MailScanner.conf which has > this setting by default %org-name% = yoursite. > > Now, when I run 'MailScanner --lint' this happens: > > Checking version numbers... > Version number in MailScanner.conf (5.0.2) is correct. > > ERROR: The "envelope_sender_header" in your spamassassin.conf > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > MailScanner setting GID to (1001) > MailScanner setting UID to (106) > > [ ... ] > > If I am right, I already did what you said. But no hope. Am I missing something? > > Eoin > > -----Original Message----- > From: MailScanner > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf > o] > On Behalf Of Jerry Benton > Sent: Monday, 25 July 2016 9:19 AM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > Edit /etc/MailScanner/spamassassin.conf > > find: envelope_sender_header > > Change it to match what the MailScanner --lint is telling you to change it to. > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -----Original Message----- > From: Eoin Kim > Reply: MailScanner Discussion > Date: July 24, 2016 at 7:17:25 PM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > > Hello Jerry, > > > > Sorry but I don't understand what you said. Such a tiny information > > to me. I have spamassassin.conf file in /etc/MailScanner directory > > which is linked to /etc/spamassassin/MailScanner.cf file. So, if I > > change spamassassin.conf > file, it should just work, correct? > > > > Eoin > > > > -----Original Message----- > > From: MailScanner > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.i > > nf > > o] > > On Behalf Of Jerry Benton > > Sent: Monday, 25 July 2016 9:14 AM > > To: MailScanner Discussion > > Subject: Re: MailScanner --lint %org-name% not importing > > > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. > > > > > > - > > Jerry Benton > > www.mailborder.com > > +1 - 844-436-6245 > > > > > > -----Original Message----- > > From: Eoin Kim > > Reply: MailScanner Discussion > > Date: July 24, 2016 at 7:10:54 PM > > To: mailscanner at lists.mailscanner.info > > Subject: MailScanner --lint %org-name% not importing > > > > > Hi, > > > > > > I am not sure if it is the desired behaviour but my MailScanner > > > doesn't import my configuration setting. > > > > > > I made site-specific configuration file inside > > > /etc/MailScanner/conf.d directory and inside that file I set > > > %org-name%. However, when I run MailScanner --lint, I get this > > > error: > > > > > > *************************************************************** > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying > > > to > > > setlogsock(unix) > > > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf > > > Read 501 hostnames from the phishing whitelist Read 15359 > > > hostnames from the phishing blacklists > > > Config: calling custom init function SQLWhitelist Starting up SQL > > > Whitelist Read 0 whitelist entries > > > Config: calling custom init function MailWatchLogging Started SQL > > > Logging child > > > Config: calling custom init function SQLBlacklist Starting up SQL > > > Blacklist Read 0 blacklist entries > > > > > > Checking version numbers... > > > Version number in MailScanner.conf (5.0.2) is correct. > > > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > > > MailScanner setting GID to (1001) > > > MailScanner setting UID to (106) > > > > > > Checking for SpamAssassin errors (if you use it)... > > > Using SpamAssassin results cache > > > Connected to SpamAssassin cache database > > > pyzor: check failed: internal error, python traceback seen in > > > response SpamAssassin reported no errors. > > > Auto: Found virus scanners: clamd > > > Connected to Processing Attempts Database Created Processing > > > Attempts Database successfully There are 0 messages in the > > > Processing Attempts Database Using locktype = posix > > > MailScanner.conf says "Virus Scanners = auto" > > > Found these virus scanners installed: clamd > > > ================================================================== > > > == == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) > > > Other > > > Checks: Found 1 problems Virus and Content Scanning: Starting > > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > > > Scanning: Clamd found 2 infections Infected message 1 came from > > > 10.1.1.1 Virus Scanning: Found 2 viruses > > > ================================================================== > > > == > > > == > > > ===== > > > Virus Scanner test reports: > > > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > > > > > If any of your virus scanners (clamd) are not listed there, you > > > should check that they are installed correctly and that > > > MailScanner is finding them correctly via its virus.scanners.conf. > > > Config: calling custom end function SQLWhitelist Closing down SQL > > > Whitelist > > > Config: calling custom end function MailWatchLogging > > > Config: calling custom end function SQLBlacklist Closing down SQL > > > Blacklist > > > > > > *************************************************************** > > > > > > So, obviously it reads my site-specific configuration file but it > > > keeps showing that error message regarding envelope_sender_header > > > setting. When I change %org-name% in the > > > /etc/MailScanner/MailScanner.conf file same as my site-specific > > > setting, the error message goes away. I believe this is a bug? Or > > > Am I doing something > > wrong? Thanks a lot. > > > > > > Eoin Kim > > > Systems Administrator > > > > > > RCS Telecommunications > > > Level 1, 133 Mary Street > > > Brisbane, QLD, 4000 > > > Office: 07 3228 0843 > > > Mobile: 0419 726 231 > > > Email: eoin.kim at rcst.com.au > > > > > > [RCST logo drop shadow] > > > > > > > > > > > > -- > > > MailScanner mailing list > > > mailscanner at lists.mailscanner.info > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From jerry.benton at mailborder.com Sun Jul 24 23:31:06 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 24 Jul 2016 16:31:06 -0700 Subject: MailScanner --lint %org-name% not importing In-Reply-To: References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn> Message-ID: Why would you change it? - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:29:55 PM To:?MailScanner Discussion Subject:? RE: MailScanner --lint %org-name% not importing > Yes, I do have except I changed it like this: include /etc/MailScanner/conf.d/*.conf. > Does this make a problem? I'll test it now. Thanks. > > Eoin > > -----Original Message----- > From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] > On Behalf Of Jerry Benton > Sent: Monday, 25 July 2016 9:27 AM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > This should be at the end of /etc/MailScanner/MailScanner.conf > > > # > # > # Include conf.d files automatically, so you can override any of the # items set above > with settings in your own local configuration files. > # They will be read and processed in alphabetical order. > # > # > include /etc/MailScanner/conf.d/* > > # End Of File > > > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -----Original Message----- > From: Eoin Kim > Reply: MailScanner Discussion > Date: July 24, 2016 at 7:24:52 PM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > > Jerry, > > > > So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside > > that file %org-name% = mynetwork. And I changed /etc/MailScanner/spamassassin.conf > file like below: > > > > envelope_sender_header X-mynetwork-MailScanner-From > > > > And I also have a file /etc/MailScanner/MailScanner.conf which has > > this setting by default %org-name% = yoursite. > > > > Now, when I run 'MailScanner --lint' this happens: > > > > Checking version numbers... > > Version number in MailScanner.conf (5.0.2) is correct. > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > MailScanner setting GID to (1001) > > MailScanner setting UID to (106) > > > > [ ... ] > > > > If I am right, I already did what you said. But no hope. Am I missing something? > > > > Eoin > > > > -----Original Message----- > > From: MailScanner > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf > > o] > > On Behalf Of Jerry Benton > > Sent: Monday, 25 July 2016 9:19 AM > > To: MailScanner Discussion > > Subject: RE: MailScanner --lint %org-name% not importing > > > > Edit /etc/MailScanner/spamassassin.conf > > > > find: envelope_sender_header > > > > Change it to match what the MailScanner --lint is telling you to change it to. > > > > > > - > > Jerry Benton > > www.mailborder.com > > +1 - 844-436-6245 > > > > > > -----Original Message----- > > From: Eoin Kim > > Reply: MailScanner Discussion > > Date: July 24, 2016 at 7:17:25 PM > > To: MailScanner Discussion > > Subject: RE: MailScanner --lint %org-name% not importing > > > > > Hello Jerry, > > > > > > Sorry but I don't understand what you said. Such a tiny information > > > to me. I have spamassassin.conf file in /etc/MailScanner directory > > > which is linked to /etc/spamassassin/MailScanner.cf file. So, if I > > > change spamassassin.conf > > file, it should just work, correct? > > > > > > Eoin > > > > > > -----Original Message----- > > > From: MailScanner > > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.i > > > nf > > > o] > > > On Behalf Of Jerry Benton > > > Sent: Monday, 25 July 2016 9:14 AM > > > To: MailScanner Discussion > > > Subject: Re: MailScanner --lint %org-name% not importing > > > > > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. > > > > > > > > > - > > > Jerry Benton > > > www.mailborder.com > > > +1 - 844-436-6245 > > > > > > > > > -----Original Message----- > > > From: Eoin Kim > > > Reply: MailScanner Discussion > > > Date: July 24, 2016 at 7:10:54 PM > > > To: mailscanner at lists.mailscanner.info > > > Subject: MailScanner --lint %org-name% not importing > > > > > > > Hi, > > > > > > > > I am not sure if it is the desired behaviour but my MailScanner > > > > doesn't import my configuration setting. > > > > > > > > I made site-specific configuration file inside > > > > /etc/MailScanner/conf.d directory and inside that file I set > > > > %org-name%. However, when I run MailScanner --lint, I get this > > > > error: > > > > > > > > *************************************************************** > > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying > > > > to > > > > setlogsock(unix) > > > > > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > > > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf > > > > Read 501 hostnames from the phishing whitelist Read 15359 > > > > hostnames from the phishing blacklists > > > > Config: calling custom init function SQLWhitelist Starting up SQL > > > > Whitelist Read 0 whitelist entries > > > > Config: calling custom init function MailWatchLogging Started SQL > > > > Logging child > > > > Config: calling custom init function SQLBlacklist Starting up SQL > > > > Blacklist Read 0 blacklist entries > > > > > > > > Checking version numbers... > > > > Version number in MailScanner.conf (5.0.2) is correct. > > > > > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > > > > > MailScanner setting GID to (1001) > > > > MailScanner setting UID to (106) > > > > > > > > Checking for SpamAssassin errors (if you use it)... > > > > Using SpamAssassin results cache > > > > Connected to SpamAssassin cache database > > > > pyzor: check failed: internal error, python traceback seen in > > > > response SpamAssassin reported no errors. > > > > Auto: Found virus scanners: clamd > > > > Connected to Processing Attempts Database Created Processing > > > > Attempts Database successfully There are 0 messages in the > > > > Processing Attempts Database Using locktype = posix > > > > MailScanner.conf says "Virus Scanners = auto" > > > > Found these virus scanners installed: clamd > > > > ================================================================== > > > > == == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) > > > > Other > > > > Checks: Found 1 problems Virus and Content Scanning: Starting > > > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > > > > Scanning: Clamd found 2 infections Infected message 1 came from > > > > 10.1.1.1 Virus Scanning: Found 2 viruses > > > > ================================================================== > > > > == > > > > == > > > > ===== > > > > Virus Scanner test reports: > > > > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > > > > > > > If any of your virus scanners (clamd) are not listed there, you > > > > should check that they are installed correctly and that > > > > MailScanner is finding them correctly via its virus.scanners.conf. > > > > Config: calling custom end function SQLWhitelist Closing down SQL > > > > Whitelist > > > > Config: calling custom end function MailWatchLogging > > > > Config: calling custom end function SQLBlacklist Closing down SQL > > > > Blacklist > > > > > > > > *************************************************************** > > > > > > > > So, obviously it reads my site-specific configuration file but it > > > > keeps showing that error message regarding envelope_sender_header > > > > setting. When I change %org-name% in the > > > > /etc/MailScanner/MailScanner.conf file same as my site-specific > > > > setting, the error message goes away. I believe this is a bug? Or > > > > Am I doing something > > > wrong? Thanks a lot. > > > > > > > > Eoin Kim > > > > Systems Administrator > > > > > > > > RCS Telecommunications > > > > Level 1, 133 Mary Street > > > > Brisbane, QLD, 4000 > > > > Office: 07 3228 0843 > > > > Mobile: 0419 726 231 > > > > Email: eoin.kim at rcst.com.au > > > > > > > > [RCST logo drop shadow] > > > > > > > > > > > > > > > > -- > > > > MailScanner mailing list > > > > mailscanner at lists.mailscanner.info > > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > > > > > > -- > > > MailScanner mailing list > > > mailscanner at lists.mailscanner.info > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > > > > > > > -- > > > MailScanner mailing list > > > mailscanner at lists.mailscanner.info > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From Eoin.Kim at rcst.com.au Sun Jul 24 23:33:31 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:33:31 +0000 Subject: MailScanner --lint %org-name% not importing In-Reply-To: References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn> <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn> Message-ID: <5ec6c74d359845e48bffe0947965b10e@BNEEXCH01.corp.qcn> Because I wanted MailScanner to read .conf file only. I reverted it and tested it, the result is the same anyway. Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton Sent: Monday, 25 July 2016 9:31 AM To: MailScanner Discussion Subject: RE: MailScanner --lint %org-name% not importing Why would you change it? - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Eoin Kim Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:29:55 PM To:?MailScanner Discussion Subject:? RE: MailScanner --lint %org-name% not importing > Yes, I do have except I changed it like this: include /etc/MailScanner/conf.d/*.conf. > Does this make a problem? I'll test it now. Thanks. > > Eoin > > -----Original Message----- > From: MailScanner > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf > o] > On Behalf Of Jerry Benton > Sent: Monday, 25 July 2016 9:27 AM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > This should be at the end of /etc/MailScanner/MailScanner.conf > > > # > # > # Include conf.d files automatically, so you can override any of the # > items set above with settings in your own local configuration files. > # They will be read and processed in alphabetical order. > # > # > include /etc/MailScanner/conf.d/* > > # End Of File > > > > > - > Jerry Benton > www.mailborder.com > +1 - 844-436-6245 > > > -----Original Message----- > From: Eoin Kim > Reply: MailScanner Discussion > Date: July 24, 2016 at 7:24:52 PM > To: MailScanner Discussion > Subject: RE: MailScanner --lint %org-name% not importing > > > Jerry, > > > > So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside > > that file %org-name% = mynetwork. And I changed > > /etc/MailScanner/spamassassin.conf > file like below: > > > > envelope_sender_header X-mynetwork-MailScanner-From > > > > And I also have a file /etc/MailScanner/MailScanner.conf which has > > this setting by default %org-name% = yoursite. > > > > Now, when I run 'MailScanner --lint' this happens: > > > > Checking version numbers... > > Version number in MailScanner.conf (5.0.2) is correct. > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > ERROR: is not correct, it should match X-yoursite-MailScanner-From > > > > MailScanner setting GID to (1001) > > MailScanner setting UID to (106) > > > > [ ... ] > > > > If I am right, I already did what you said. But no hope. Am I missing something? > > > > Eoin > > > > -----Original Message----- > > From: MailScanner > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.i > > nf > > o] > > On Behalf Of Jerry Benton > > Sent: Monday, 25 July 2016 9:19 AM > > To: MailScanner Discussion > > Subject: RE: MailScanner --lint %org-name% not importing > > > > Edit /etc/MailScanner/spamassassin.conf > > > > find: envelope_sender_header > > > > Change it to match what the MailScanner --lint is telling you to change it to. > > > > > > - > > Jerry Benton > > www.mailborder.com > > +1 - 844-436-6245 > > > > > > -----Original Message----- > > From: Eoin Kim > > Reply: MailScanner Discussion > > Date: July 24, 2016 at 7:17:25 PM > > To: MailScanner Discussion > > Subject: RE: MailScanner --lint %org-name% not importing > > > > > Hello Jerry, > > > > > > Sorry but I don't understand what you said. Such a tiny > > > information to me. I have spamassassin.conf file in > > > /etc/MailScanner directory which is linked to > > > /etc/spamassassin/MailScanner.cf file. So, if I change > > > spamassassin.conf > > file, it should just work, correct? > > > > > > Eoin > > > > > > -----Original Message----- > > > From: MailScanner > > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner > > > .i > > > nf > > > o] > > > On Behalf Of Jerry Benton > > > Sent: Monday, 25 July 2016 9:14 AM > > > To: MailScanner Discussion > > > Subject: Re: MailScanner --lint %org-name% not importing > > > > > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file. > > > > > > > > > - > > > Jerry Benton > > > www.mailborder.com > > > +1 - 844-436-6245 > > > > > > > > > -----Original Message----- > > > From: Eoin Kim > > > Reply: MailScanner Discussion > > > Date: July 24, 2016 at 7:10:54 PM > > > To: mailscanner at lists.mailscanner.info > > > Subject: MailScanner --lint %org-name% not importing > > > > > > > Hi, > > > > > > > > I am not sure if it is the desired behaviour but my MailScanner > > > > doesn't import my configuration setting. > > > > > > > > I made site-specific configuration file inside > > > > /etc/MailScanner/conf.d directory and inside that file I set > > > > %org-name%. However, when I run MailScanner --lint, I get this > > > > error: > > > > > > > > *************************************************************** > > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint > > > > Trying to > > > > setlogsock(unix) > > > > > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > > > Reading configuration file > > > > /etc/MailScanner/conf.d/mynetwork.conf > > > > Read 501 hostnames from the phishing whitelist Read 15359 > > > > hostnames from the phishing blacklists > > > > Config: calling custom init function SQLWhitelist Starting up > > > > SQL Whitelist Read 0 whitelist entries > > > > Config: calling custom init function MailWatchLogging Started > > > > SQL Logging child > > > > Config: calling custom init function SQLBlacklist Starting up > > > > SQL Blacklist Read 0 blacklist entries > > > > > > > > Checking version numbers... > > > > Version number in MailScanner.conf (5.0.2) is correct. > > > > > > > > ERROR: The "envelope_sender_header" in your spamassassin.conf > > > > ERROR: is not correct, it should match > > > > X-yoursite-MailScanner-From > > > > > > > > MailScanner setting GID to (1001) MailScanner setting UID to > > > > (106) > > > > > > > > Checking for SpamAssassin errors (if you use it)... > > > > Using SpamAssassin results cache Connected to SpamAssassin cache > > > > database > > > > pyzor: check failed: internal error, python traceback seen in > > > > response SpamAssassin reported no errors. > > > > Auto: Found virus scanners: clamd Connected to Processing > > > > Attempts Database Created Processing Attempts Database > > > > successfully There are 0 messages in the Processing Attempts > > > > Database Using locktype = posix MailScanner.conf says "Virus > > > > Scanners = auto" > > > > Found these virus scanners installed: clamd > > > > ================================================================ > > > > == == == ===== Filename Checks: Windows/DOS Executable (1 > > > > eicar.com) Other > > > > Checks: Found 1 problems Virus and Content Scanning: Starting > > > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus > > > > Scanning: Clamd found 2 infections Infected message 1 came from > > > > 10.1.1.1 Virus Scanning: Found 2 viruses > > > > ================================================================ > > > > == > > > > == > > > > == > > > > ===== > > > > Virus Scanner test reports: > > > > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > > > > > > > If any of your virus scanners (clamd) are not listed there, you > > > > should check that they are installed correctly and that > > > > MailScanner is finding them correctly via its virus.scanners.conf. > > > > Config: calling custom end function SQLWhitelist Closing down > > > > SQL Whitelist > > > > Config: calling custom end function MailWatchLogging > > > > Config: calling custom end function SQLBlacklist Closing down > > > > SQL Blacklist > > > > > > > > *************************************************************** > > > > > > > > So, obviously it reads my site-specific configuration file but > > > > it keeps showing that error message regarding > > > > envelope_sender_header setting. When I change %org-name% in the > > > > /etc/MailScanner/MailScanner.conf file same as my site-specific > > > > setting, the error message goes away. I believe this is a bug? > > > > Or Am I doing something > > > wrong? Thanks a lot. > > > > > > > > Eoin Kim > > > > Systems Administrator > > > > > > > > RCS Telecommunications > > > > Level 1, 133 Mary Street > > > > Brisbane, QLD, 4000 > > > > Office: 07 3228 0843 > > > > Mobile: 0419 726 231 > > > > Email: eoin.kim at rcst.com.au > > > > > > > > [RCST logo drop shadow] > > > > > > > > > > > > > > > > -- > > > > MailScanner mailing list > > > > mailscanner at lists.mailscanner.info > > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > > > > > > -- > > > MailScanner mailing list > > > mailscanner at lists.mailscanner.info > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > > > > > > > -- > > > MailScanner mailing list > > > mailscanner at lists.mailscanner.info > > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From Antony.Stone at mailscanner.open.source.it Sun Jul 24 23:40:00 2016 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Mon, 25 Jul 2016 01:40:00 +0200 Subject: MailScanner --lint %org-name% not importing In-Reply-To: References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> Message-ID: <201607250140.00968.Antony.Stone@mailscanner.open.source.it> On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote: > Why would you change it? Fair question, but it seems to be working okay: On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote: > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf My observation about this would be that /etc/MailScanner/conf.d/README contains the comment: # NOTE: If you change the value of a %variable% then you must redefine all # the settings that use that %variable% here, as the %variable% # substitutions are done when the files are initially read, not later when # settings are looked up when MailScanner is processing messages. I wonder if that is in fact the problem here? Antony. From jerry.benton at mailborder.com Sun Jul 24 23:42:52 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 24 Jul 2016 16:42:52 -0700 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <201607250140.00968.Antony.Stone@mailscanner.open.source.it> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <201607250140.00968.Antony.Stone@mailscanner.open.source.it> Message-ID: What he said. It is just easier in this case to change the main file MailScanner.conf - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Antony Stone Reply:?MailScanner Discussion Date:?July 24, 2016 at 7:40:21 PM To:?MailScanner Discussion Subject:? Re: MailScanner --lint %org-name% not importing > On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote: > > > Why would you change it? > > Fair question, but it seems to be working okay: > > On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote: > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint > > Trying to setlogsock(unix) > > > > Reading configuration file /etc/MailScanner/MailScanner.conf > > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf > > My observation about this would be that /etc/MailScanner/conf.d/README > contains the comment: > > # NOTE: If you change the value of a %variable% then you must redefine all > # the settings that use that %variable% here, as the %variable% > # substitutions are done when the files are initially read, not later when > # settings are looked up when MailScanner is processing messages. > > I wonder if that is in fact the problem here? > > > Antony. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From Eoin.Kim at rcst.com.au Sun Jul 24 23:45:24 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:45:24 +0000 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <201607250140.00968.Antony.Stone@mailscanner.open.source.it> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <201607250140.00968.Antony.Stone@mailscanner.open.source.it> Message-ID: <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn> Hello Antony, So, If I understand what you said correctly, does that mean I have to add settings which have %org-name% string in my site-specific configuration file? For example, Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report: Mail Header = X-%org-name%-MailScanner: [ ... ] Am I following you? Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Antony Stone Sent: Monday, 25 July 2016 9:40 AM To: MailScanner Discussion Subject: Re: MailScanner --lint %org-name% not importing On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote: > Why would you change it? Fair question, but it seems to be working okay: On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote: > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to > setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf Reading > configuration file /etc/MailScanner/conf.d/mynetwork.conf My observation about this would be that /etc/MailScanner/conf.d/README contains the comment: # NOTE: If you change the value of a %variable% then you must redefine all # the settings that use that %variable% here, as the %variable% # substitutions are done when the files are initially read, not later when # settings are looked up when MailScanner is processing messages. I wonder if that is in fact the problem here? Antony. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From Antony.Stone at mailscanner.open.source.it Sun Jul 24 23:49:47 2016 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Mon, 25 Jul 2016 01:49:47 +0200 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <201607250140.00968.Antony.Stone@mailscanner.open.source.it> <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn> Message-ID: <201607250149.47740.Antony.Stone@mailscanner.open.source.it> On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote: > Hello Antony, > > So, If I understand what you said correctly, does that mean I have to add > settings which have %org-name% string in my site-specific configuration > file? For example, > > Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report: > Mail Header = X-%org-name%-MailScanner: > [ ... ] > > Am I following you? Yes. The rule is: - if you change some %whatever% variable, and that variable is then referenced within another rule, you have to make sure that that other rule is repeated in your config files *after* the point where you defined %whatever% so that it uses the new definition of %whatever% and not the old one. Antony. -- The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time. Please reply to the list; please *don't* CC me. From Eoin.Kim at rcst.com.au Sun Jul 24 23:55:13 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Sun, 24 Jul 2016 23:55:13 +0000 Subject: MailScanner --lint %org-name% not importing In-Reply-To: <201607250149.47740.Antony.Stone@mailscanner.open.source.it> References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <201607250140.00968.Antony.Stone@mailscanner.open.source.it> <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn> <201607250149.47740.Antony.Stone@mailscanner.open.source.it> Message-ID: <23bb00be71fa4fa3ac4424863342f12e@BNEEXCH01.corp.qcn> Thanks for that. I seriously have to practice more English. I'll have a go and update this. Thanks again. Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Antony Stone Sent: Monday, 25 July 2016 9:50 AM To: MailScanner Discussion Subject: Re: MailScanner --lint %org-name% not importing On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote: > Hello Antony, > > So, If I understand what you said correctly, does that mean I have to > add settings which have %org-name% string in my site-specific > configuration file? For example, > > Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report: > Mail Header = X-%org-name%-MailScanner: > [ ... ] > > Am I following you? Yes. The rule is: - if you change some %whatever% variable, and that variable is then referenced within another rule, you have to make sure that that other rule is repeated in your config files *after* the point where you defined %whatever% so that it uses the new definition of %whatever% and not the old one. Antony. -- The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time. Please reply to the list; please *don't* CC me. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From Eoin.Kim at rcst.com.au Mon Jul 25 00:24:33 2016 From: Eoin.Kim at rcst.com.au (Eoin Kim) Date: Mon, 25 Jul 2016 00:24:33 +0000 Subject: MailScanner --lint %org-name% not importing References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn> <201607250140.00968.Antony.Stone@mailscanner.open.source.it> <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn> <201607250149.47740.Antony.Stone@mailscanner.open.source.it> Message-ID: That works! Thanks for your help. I really appreciate it. Eoin -----Original Message----- From: Eoin Kim Sent: Monday, 25 July 2016 9:55 AM To: 'MailScanner Discussion' Subject: RE: MailScanner --lint %org-name% not importing Thanks for that. I seriously have to practice more English. I'll have a go and update this. Thanks again. Eoin -----Original Message----- From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Antony Stone Sent: Monday, 25 July 2016 9:50 AM To: MailScanner Discussion Subject: Re: MailScanner --lint %org-name% not importing On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote: > Hello Antony, > > So, If I understand what you said correctly, does that mean I have to > add settings which have %org-name% string in my site-specific > configuration file? For example, > > Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report: > Mail Header = X-%org-name%-MailScanner: > [ ... ] > > Am I following you? Yes. The rule is: - if you change some %whatever% variable, and that variable is then referenced within another rule, you have to make sure that that other rule is repeated in your config files *after* the point where you defined %whatever% so that it uses the new definition of %whatever% and not the old one. Antony. -- The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time. Please reply to the list; please *don't* CC me. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner From Antony.Stone at mailscanner.open.source.it Mon Jul 25 07:31:14 2016 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Mon, 25 Jul 2016 14:31:14 +0700 Subject: MailScanner --lint %org-name% not importing Message-ID: On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote: > Hello Antony, > > So, If I understand what you said correctly, does that mean I have to add > settings which have %org-name% string in my site-specific configuration > file? For example, > > Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report: > Mail Header = X-%org-name%-MailScanner: > [ ... ] > > Am I following you? Yes. The rule is: - if you change some %whatever% variable, and that variable is then referenced within another rule, you have to make sure that that other rule is repeated in your config files *after* the point where you defined %whatever% so that it uses the new definition of %whatever% and not the old one. Antony. -- The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time. Please reply to the list; please *don't* CC me. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From Antony.Stone at mailscanner.open.source.it Mon Jul 25 07:31:29 2016 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Mon, 25 Jul 2016 14:31:29 +0700 Subject: MailScanner --lint %org-name% not importing Message-ID: <1d989de1f4d1845f6335e3fa2e7c69d9@my.mimosacloud.com> On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote: > Why would you change it? Fair question, but it seems to be working okay: On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote: > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf My observation about this would be that /etc/MailScanner/conf.d/README contains the comment: # NOTE: If you change the value of a %variable% then you must redefine all # the settings that use that %variable% here, as the %variable% # substitutions are done when the files are initially read, not later when # settings are looked up when MailScanner is processing messages. I wonder if that is in fact the problem here? Antony. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark at meelhuysen.com Tue Jul 26 19:04:42 2016 From: mark at meelhuysen.com (Mark Meelhuysen) Date: Tue, 26 Jul 2016 19:04:42 +0000 Subject: Warning: skipping message as it has been attempted too many times Message-ID: Hello all, All of a sudden mailflow stopt functioning. It stopped at 23.50 last night.There were about 200 messages waiting in the HOLD directory. Last week ik updated my Centos 6 installation with the latest security updates. What have i tried already: * Stopped MS services and removed the Processing.db : Did not solve the problem. * Stopped MS services and removed the Processing.db, and moved all the queued files from /var/spool/postfix/hold to a temp dir : Did not solve the problem. Queue is growing again. Below a piece of the maillog: Jul 26 19:49:19 ms MailScanner[16941]: MailScanner E-Mail Virus Scanner version 4.84.6 starting... Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/MailScanner.conf Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/conf.d/README Jul 26 19:49:19 ms MailScanner[16941]: Read 1769 hostnames from the phishing whitelist Jul 26 19:49:19 ms MailScanner[16941]: Read 5890 hostnames from the phishing blacklists Jul 26 19:49:19 ms MailScanner[16941]: Config: calling custom init function MailWatchLogging Jul 26 19:49:19 ms MailScanner[16941]: Started SQL Logging child Jul 26 19:49:20 ms MailScanner[16941]: Using SpamAssassin results cache Jul 26 19:49:20 ms MailScanner[16941]: Connected to SpamAssassin cache database Jul 26 19:49:20 ms MailScanner[16941]: Enabling SpamAssassin auto-whitelist functionality... Jul 26 19:49:22 ms MailScanner[16941]: Connected to Processing Attempts Database Jul 26 19:49:22 ms MailScanner[16941]: Found 4 messages in the Processing Attempts Database Jul 26 19:49:22 ms MailScanner[16941]: Using locktype = flock Jul 26 19:49:22 ms MailScanner[16941]: Warning: skipping message C5FF622B8B0.A9BFD as it has been attempted too many times Jul 26 19:49:22 ms MailScanner[16941]: Quarantined message C5FF622B8B0.A9BFD as it caused MailScanner to crash several times Jul 26 19:49:22 ms MailScanner[16941]: Saved entire message to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD Jul 26 19:49:22 ms MailScanner[16941]: writing to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No such file or directory The system is running perfectly fine since november 2014. Can onyone tell me what i should try next? Thank you in advance, Mark From Antony.Stone at mailscanner.open.source.it Tue Jul 26 19:21:30 2016 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Tue, 26 Jul 2016 21:21:30 +0200 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: References: Message-ID: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> On Tuesday 26 July 2016 at 21:04:42, Mark Meelhuysen wrote: > 19:49:22 ms MailScanner[16941]: writing to > /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No > such file or directory > > The system is running perfectly fine since november 2014. Can onyone tell > me what i should try next? Look in /var and work your way down the path given above to see what is missing (or, more likely, has the wrong ownership / permissions). Antony. -- Someone has stolen all the toilets from New Scotland Yard. Police say they have absolutely nothing to go on. Please reply to the list; please *don't* CC me. From mark at meelhuysen.com Tue Jul 26 17:58:05 2016 From: mark at meelhuysen.com (Mark Meelhuysen) Date: Tue, 26 Jul 2016 17:58:05 +0000 Subject: Warning: skipping message as it has been attempted too many times Message-ID: Hello all, All of a sudden mailflow stopt functioning. It stopped at 23.50 last night.There were about 200 messages waiting in the HOLD directory. Last week ik updated my Centos 6 installation with the latest security updates. What have i tried already: * Stopped MS services and removed the Processing.db : Did not solve the problem. * Stopped MS services and removed the Processing.db, and moved all the queued files from /var/spool/postfix/hold to a temp dir : Did not solve the problem. Queue is growing again. Below a piece of the maillog: Jul 26 19:49:19 ms MailScanner[16941]: MailScanner E-Mail Virus Scanner version 4.84.6 starting... Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/MailScanner.conf Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/conf.d/README Jul 26 19:49:19 ms MailScanner[16941]: Read 1769 hostnames from the phishing whitelist Jul 26 19:49:19 ms MailScanner[16941]: Read 5890 hostnames from the phishing blacklists Jul 26 19:49:19 ms MailScanner[16941]: Config: calling custom init function MailWatchLogging Jul 26 19:49:19 ms MailScanner[16941]: Started SQL Logging child Jul 26 19:49:20 ms MailScanner[16941]: Using SpamAssassin results cache Jul 26 19:49:20 ms MailScanner[16941]: Connected to SpamAssassin cache database Jul 26 19:49:20 ms MailScanner[16941]: Enabling SpamAssassin auto-whitelist functionality... Jul 26 19:49:22 ms MailScanner[16941]: Connected to Processing Attempts Database Jul 26 19:49:22 ms MailScanner[16941]: Found 4 messages in the Processing Attempts Database Jul 26 19:49:22 ms MailScanner[16941]: Using locktype = flock Jul 26 19:49:22 ms MailScanner[16941]: Warning: skipping message C5FF622B8B0.A9BFD as it has been attempted too many times Jul 26 19:49:22 ms MailScanner[16941]: Quarantined message C5FF622B8B0.A9BFD as it caused MailScanner to crash several times Jul 26 19:49:22 ms MailScanner[16941]: Saved entire message to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD Jul 26 19:49:22 ms MailScanner[16941]: writing to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No such file or directory The system is running perfectly fine since november 2014. Can onyone tell me what i should try next? Thank you in advance, Mark -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. From mark at meelhuysen.com Tue Jul 26 17:58:05 2016 From: mark at meelhuysen.com (Mark Meelhuysen) Date: Tue, 26 Jul 2016 17:58:05 +0000 Subject: Warning: skipping message as it has been attempted too many times Message-ID: Hello all, All of a sudden mailflow stopt functioning. It stopped at 23.50 last night.There were about 200 messages waiting in the HOLD directory. Last week ik updated my Centos 6 installation with the latest security updates. What have i tried already: * Stopped MS services and removed the Processing.db : Did not solve the problem. * Stopped MS services and removed the Processing.db, and moved all the queued files from /var/spool/postfix/hold to a temp dir : Did not solve the problem. Queue is growing again. Below a piece of the maillog: Jul 26 19:49:19 ms MailScanner[16941]: MailScanner E-Mail Virus Scanner version 4.84.6 starting... Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/MailScanner.conf Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/conf.d/README Jul 26 19:49:19 ms MailScanner[16941]: Read 1769 hostnames from the phishing whitelist Jul 26 19:49:19 ms MailScanner[16941]: Read 5890 hostnames from the phishing blacklists Jul 26 19:49:19 ms MailScanner[16941]: Config: calling custom init function MailWatchLogging Jul 26 19:49:19 ms MailScanner[16941]: Started SQL Logging child Jul 26 19:49:20 ms MailScanner[16941]: Using SpamAssassin results cache Jul 26 19:49:20 ms MailScanner[16941]: Connected to SpamAssassin cache database Jul 26 19:49:20 ms MailScanner[16941]: Enabling SpamAssassin auto-whitelist functionality... Jul 26 19:49:22 ms MailScanner[16941]: Connected to Processing Attempts Database Jul 26 19:49:22 ms MailScanner[16941]: Found 4 messages in the Processing Attempts Database Jul 26 19:49:22 ms MailScanner[16941]: Using locktype = flock Jul 26 19:49:22 ms MailScanner[16941]: Warning: skipping message C5FF622B8B0.A9BFD as it has been attempted too many times Jul 26 19:49:22 ms MailScanner[16941]: Quarantined message C5FF622B8B0.A9BFD as it caused MailScanner to crash several times Jul 26 19:49:22 ms MailScanner[16941]: Saved entire message to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD Jul 26 19:49:22 ms MailScanner[16941]: writing to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No such file or directory The system is running perfectly fine since november 2014. Can onyone tell me what i should try next? Thank you in advance, Mark -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. From mark at meelhuysen.com Tue Jul 26 20:36:09 2016 From: mark at meelhuysen.com (Mark Meelhuysen) Date: Tue, 26 Jul 2016 20:36:09 +0000 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> Message-ID: Hi all, First of all, sorry, I think my e-mail was send multiple times as my queue was emptied. @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that. After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory. Any thoughts? Thank you in advance. Mark -----Oorspronkelijk bericht----- Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Antony Stone Verzonden: dinsdag 26 juli 2016 21:22 Aan: MailScanner Discussion Onderwerp: Re: Warning: skipping message as it has been attempted too many times On Tuesday 26 July 2016 at 21:04:42, Mark Meelhuysen wrote: > 19:49:22 ms MailScanner[16941]: writing to > /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: > No such file or directory > > The system is running perfectly fine since november 2014. Can onyone > tell me what i should try next? Look in /var and work your way down the path given above to see what is missing (or, more likely, has the wrong ownership / permissions). Antony. -- Someone has stolen all the toilets from New Scotland Yard. Police say they have absolutely nothing to go on. Please reply to the list; please *don't* CC me. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. From mark at msapiro.net Tue Jul 26 22:35:16 2016 From: mark at msapiro.net (Mark Sapiro) Date: Tue, 26 Jul 2016 15:35:16 -0700 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> Message-ID: <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> On 07/26/2016 01:36 PM, Mark Meelhuysen wrote: > > @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that. > After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory. > Any thoughts? The problem probably will recur. Mailscanner creates the yyyymmdd directories each day, but for some reason wasn't able to last night and probably won't be able to tonight for the same reason. Normally, the directory and subordinates are created/written by MailScanner's 'Run As User' which needs read, write and search permission on /var/spool/MailScanner/quarantine/. This will be the user that owns the /var/spool/MailScanner/quarantine/* directories. If it has permission, it could be a SELinux issue. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From jerry.benton at mailborder.com Tue Jul 26 22:38:30 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Tue, 26 Jul 2016 18:38:30 -0400 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> Message-ID: Check to make sure part or all of your file system was not put into protected or read only mode because of some event like a power interruption or VM modification. - Jerry Benton www.mailborder.com Sent from my iPhone > On Jul 26, 2016, at 18:35, Mark Sapiro wrote: > >> On 07/26/2016 01:36 PM, Mark Meelhuysen wrote: >> >> @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that. >> After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory. >> Any thoughts? > > > The problem probably will recur. Mailscanner creates the yyyymmdd > directories each day, but for some reason wasn't able to last night and > probably won't be able to tonight for the same reason. > > Normally, the directory and subordinates are created/written by > MailScanner's 'Run As User' which needs read, write and search > permission on /var/spool/MailScanner/quarantine/. This will be the user > that owns the /var/spool/MailScanner/quarantine/* directories. If it has > permission, it could be a SELinux issue. > > -- > Mark Sapiro The highway is for gamblers, > San Francisco Bay Area, California better use your sense - B. Dylan > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > From mark at meelhuysen.com Wed Jul 27 06:56:59 2016 From: mark at meelhuysen.com (Mark Meelhuysen) Date: Wed, 27 Jul 2016 06:56:59 +0000 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> Message-ID: <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> Indeed, the directory failed to be created again last night. The owner of the quarantinedirectory is root with group apache. The owner of all subdirs is postfix with group apache. Security is 770. MailScanner.conf settings: Run As User = postfix Run As Group = postfix Is it ok then that the dirs. Have group apache? Is there some logging where the error is logged when the system was not able to create the quarantine directory? Thank you in advance. Mark -----Oorspronkelijk bericht----- Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Mark Sapiro Verzonden: woensdag 27 juli 2016 00:35 Aan: mailscanner at lists.mailscanner.info Onderwerp: Re: Warning: skipping message as it has been attempted too many times On 07/26/2016 01:36 PM, Mark Meelhuysen wrote: > > @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that. > After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory. > Any thoughts? The problem probably will recur. Mailscanner creates the yyyymmdd directories each day, but for some reason wasn't able to last night and probably won't be able to tonight for the same reason. Normally, the directory and subordinates are created/written by MailScanner's 'Run As User' which needs read, write and search permission on /var/spool/MailScanner/quarantine/. This will be the user that owns the /var/spool/MailScanner/quarantine/* directories. If it has permission, it could be a SELinux issue. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. From jerry.benton at mailborder.com Wed Jul 27 07:25:39 2016 From: jerry.benton at mailborder.com (Jerry Benton) Date: Wed, 27 Jul 2016 00:25:39 -0700 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> Message-ID: I would suggest taking a look at how permissions are done on MailScanner v5. - Jerry Benton www.mailborder.com +1 - 844-436-6245 -----Original Message----- From:?Mark Meelhuysen Reply:?MailScanner Discussion Date:?July 27, 2016 at 2:57:32 AM To:?MailScanner Discussion Subject:? RE: Warning: skipping message as it has been attempted too many times > Indeed, the directory failed to be created again last night. > The owner of the quarantinedirectory is root with group apache. > The owner of all subdirs is postfix with group apache. Security is 770. > MailScanner.conf settings: > Run As User = postfix > Run As Group = postfix > Is it ok then that the dirs. Have group apache? > Is there some logging where the error is logged when the system was not able to create the > quarantine directory? > > Thank you in advance. > > Mark > > > -----Oorspronkelijk bericht----- > Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] > Namens Mark Sapiro > Verzonden: woensdag 27 juli 2016 00:35 > Aan: mailscanner at lists.mailscanner.info > Onderwerp: Re: Warning: skipping message as it has been attempted too many times > > On 07/26/2016 01:36 PM, Mark Meelhuysen wrote: > > > > @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not > think of checking that. > > After creating it with the correct permissions the queue was processed. I wonder if > the problem will repeat this night as I could not find any errors about the system not being > able to create the directory. > > Any thoughts? > > > The problem probably will recur. Mailscanner creates the yyyymmdd directories each > day, but for some reason wasn't able to last night and probably won't be able to tonight > for the same reason. > > Normally, the directory and subordinates are created/written by MailScanner's 'Run > As User' which needs read, write and search permission on /var/spool/MailScanner/quarantine/. > This will be the user that owns the /var/spool/MailScanner/quarantine/* directories. > If it has permission, it could be a SELinux issue. > > -- > Mark Sapiro The highway is for gamblers, > San Francisco Bay Area, California better use your sense - B. Dylan > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > > -------------- > Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te > zijn. > > > -------------- > Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te > zijn. > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/listinfo/mailscanner > > From mark at msapiro.net Wed Jul 27 07:35:36 2016 From: mark at msapiro.net (Mark Sapiro) Date: Wed, 27 Jul 2016 00:35:36 -0700 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> Message-ID: <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net> On 07/26/2016 11:56 PM, Mark Meelhuysen wrote: > Indeed, the directory failed to be created again last night. > The owner of the quarantinedirectory is root with group apache. > The owner of all subdirs is postfix with group apache. Security is 770. > MailScanner.conf settings: > Run As User = postfix > Run As Group = postfix > Is it ok then that the dirs. Have group apache? That's not the problem. It's OK. The quarantine directory needs to be owned by postfix. That's the issue because MailScanner running as postfix can't create quarantine/yyyymmdd with it owned by root and group apache. sudo chown postfix /var/spool/MailScanner/quarantine > Is there some logging where the error is logged when the system was not able to create the quarantine directory? I think it should be logged in the mail.log where other MailScanner log messages are logged, but I'm not sure that it is. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From mark at meelhuysen.com Wed Jul 27 07:49:35 2016 From: mark at meelhuysen.com (Mark Meelhuysen) Date: Wed, 27 Jul 2016 07:49:35 +0000 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net> Message-ID: <7704eb3f81144db183ef00b3c4804f34@DC01.meelhuysen.com> Hi Mark, Thank you for your response. Yesterday I restored a backup of the VHD to another VM and checked those settings. The quarantine folder is also owned by root and group apache. The back-up is of a time that everything was working. I did not test it overnight to see if the dir was created.. Does that make any sense? Thank you. Mark -----Oorspronkelijk bericht----- Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Mark Sapiro Verzonden: woensdag 27 juli 2016 09:36 Aan: mailscanner at lists.mailscanner.info Onderwerp: Re: Warning: skipping message as it has been attempted too many times On 07/26/2016 11:56 PM, Mark Meelhuysen wrote: > Indeed, the directory failed to be created again last night. > The owner of the quarantinedirectory is root with group apache. > The owner of all subdirs is postfix with group apache. Security is 770. > MailScanner.conf settings: > Run As User = postfix > Run As Group = postfix > Is it ok then that the dirs. Have group apache? That's not the problem. It's OK. The quarantine directory needs to be owned by postfix. That's the issue because MailScanner running as postfix can't create quarantine/yyyymmdd with it owned by root and group apache. sudo chown postfix /var/spool/MailScanner/quarantine > Is there some logging where the error is logged when the system was not able to create the quarantine directory? I think it should be logged in the mail.log where other MailScanner log messages are logged, but I'm not sure that it is. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/listinfo/mailscanner -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. -------------- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. From mark at msapiro.net Wed Jul 27 13:23:32 2016 From: mark at msapiro.net (Mark Sapiro) Date: Wed, 27 Jul 2016 06:23:32 -0700 Subject: Warning: skipping message as it has been attempted too many times In-Reply-To: <7704eb3f81144db183ef00b3c4804f34@DC01.meelhuysen.com> References: <201607262121.30302.Antony.Stone@mailscanner.open.source.it> <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net> <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com> <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net> <7704eb3f81144db183ef00b3c4804f34@DC01.meelhuysen.com> Message-ID: On 07/27/2016 12:49 AM, Mark Meelhuysen wrote: > Yesterday I restored a backup of the VHD to another VM and checked those settings. The quarantine folder is also owned by root and group apache. The back-up is of a time that everything was working. I did not test it overnight to see if the dir was created.. > Does that make any sense? Possibly depending on the setting for Quarantine Group. If that's apache in the backup MailScanner config, then it would have been OK. Maybe there's a /etc/MailScanner/conf.d file that set Quarantine Group = apache that got changed or lost. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan