From jerry.benton at mailborder.com  Tue Aug  1 03:17:05 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 31 Jul 2017 23:17:05 -0400
Subject: Mailman test
Message-ID: <024201d30a74$a70345d0$f509d170$@mailborder.com>

Because I broke it earlier ?


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605




From sales at edenusa.com  Tue Aug  1 07:03:34 2017
From: sales at edenusa.com (Paul Scott)
Date: Tue, 1 Aug 2017 07:03:34 +0000
Subject: Upgrade to CentOS 7.0
In-Reply-To: <CABu_8zLqruSB0rTk5RS2_oNNN0Zmu92EgM469COGUupubcKOBw@mail.gmail.com>
References: <SN1PR10MB0590B9CF05A5EB486E80DA98B0C00@SN1PR10MB0590.namprd10.prod.outlook.com>
 <CABu_8zKRC6hUfRkeGUABsJaBqDoUjjeNX+ri4BRq5GHDUfM8sw@mail.gmail.com>
 <1497564059.1992.0@smtp.gmail.com>
 <CABu_8zKj-qY5QULo1A+4QsZgmAP51UhfXTVOoVHL490x0udbVA@mail.gmail.com>
 <alpine.LRH.2.20.1707031050230.20609@raveon.vaag.nu>
 <SN1PR10MB059083DE6DF9DB4FA25C77CEB0AF0@SN1PR10MB0590.namprd10.prod.outlook.com>
 <001701d2fab9$ec0db220$c4291660$@mailborder.com>
 <CABu_8zL4RfM3oQw+RNNEXZvvtjiEnZc9udA01aHtHbywRK2ARg@mail.gmail.com>
 <CABu_8z+vP3n=H4LnYsQmwiq1gVv4P=pa3u8Qcv2zGnQnPm6MKw@mail.gmail.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F5910A28@HC-EXMBX04.herefordshire.gov.uk>
 <003e01d305f5$b856a990$2903fcb0$@mailborder.com>
 <CABu_8zLqruSB0rTk5RS2_oNNN0Zmu92EgM469COGUupubcKOBw@mail.gmail.com>
Message-ID: <SN1PR10MB0590FB92794A21DB991016A3B0B30@SN1PR10MB0590.namprd10.prod.outlook.com>

Thank you for the update Shawn and Jerry.  Much appreciated!

Sincerely,

Paul Scott, Engineer
Eden USA, Incorporated
Event Production Services Since 1995
Los Angeles-Las Vegas-New York
sales at edenusa.com<mailto:sales at edenusa.com> OR edenusasales at gmail.com<mailto:edenusasales at gmail.com>
Telephone(s): 866.501.3336 OR 951.505.6967
Fax: 866.502.3336

WEBSITE: https://www.edenusa.com
FACEBOOK: http://www.facebook.com/edenusainc

From: MailScanner [mailto:mailscanner-bounces+sales=edenusa.com at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, July 28, 2017 11:18 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Upgrade to CentOS 7.0

Getting closer.  One more round of testing and a couple confirmed bugs to squash...I'll keep everyone posted.

On Wed, Jul 26, 2017 at 5:58 AM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
As soon as I have confirmation all of the packages are working correctly. Shawn is ironing out some issues.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605<tel:(843)%20800-8605>
+44 (020) 3883-8605<tel:+44%2020%203883%208605>

From: MailScanner [mailto:mailscanner-bounces+jerry.benton<mailto:mailscanner-bounces%2Bjerry.benton>=mailborder.com at lists.mailscanner.info<mailto:mailborder.com at lists.mailscanner.info>] On Behalf Of Randal, Phil
Sent: Wednesday, July 26, 2017 5:16 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: Upgrade to CentOS 7.0

Hi folks,

I see that Shawn Iverson has published MailScanner 5.0.6-2 on GitHub.

When can we expect to see updated install packages on www.mailscanner.info<http://www.mailscanner.info>?

Cheers,

Phil

From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: 14 July 2017 00:23
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: Upgrade to CentOS 7.0

pushing this and other tasks to the weekend, will keep you posted...

On Tue, Jul 11, 2017 at 11:00 PM, Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
Jerry,

Sounds great, let me get to work on this.  ETA will probably be tomorrow, getting late here...

On Tue, Jul 11, 2017 at 10:52 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
I recently switched development environments and have yet to spin up the servers to build the DEB and RPM packages. If anyone has is already setup to build out some release packages (i.e. Shawn), I will happily post those for download on the MailScanner website. Just make sure you give me a chance to update build versions in GitHub. I would also need a changelog.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 (843) 800-8605<tel:%2B1%20%20%20%28843%29%20800-8605>
+44 (020) 3883-8605<tel:%2B44%20%28020%29%203883-8605>


-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+jerry.benton<mailto:mailscanner-bounces%2Bjerry.benton>=mailborder.com at lists.mailscanner.info<mailto:mailborder.com at lists.mailscanner.info>] On Behalf Of Paul Scott
Sent: Tuesday, July 11, 2017 9:14 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: Upgrade to CentOS 7.0

I am wondering the same thing.  Have my system up and running, but have not received word yet with the proper MailScanner version to install.

Sincerely,

Paul Scott, Engineer
Eden USA, Incorporated
Event Production Services Since 1995
Los Angeles-Las Vegas-New York
sales at edenusa.com<mailto:sales at edenusa.com> OR edenusasales at gmail.com<mailto:edenusasales at gmail.com>
Telephone(s): 866.501.3336<tel:866.501.3336> OR 951.505.6967<tel:951.505.6967>
Fax: 866.502.3336<tel:866.502.3336>

WEBSITE: https://www.edenusa.com
FACEBOOK: http://www.facebook.com/edenusainc

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+sales<mailto:mailscanner-bounces%2Bsales>=edenusa.com at lists.mailscanner.info<mailto:edenusa.com at lists.mailscanner.info>] On Behalf Of Remco Barendse
Sent: Monday, July 03, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: Upgrade to CentOS 7.0

Is the update available somewhere? I am on the same path of having to upgrade, while I am testing I might as well test the new systemd enhats (would be a pity to start off with Centos6 now)  now) :)

Thanks!

On Thu, 15 Jun 2017, Shawn Iverson wrote:

> Jerry,
> Yes.  There's a little bug in the SUSE installer, but it was already
> present prior to the changes.  Just a missing perl module that should be installed when running install.sh.  I have an issue open for it.  With a little time I should be able to resolve it for you.
>
> Feel free to test further, or if desired, let me know and I'll run another round of testing.  I have run successful tests on CentOS, Fedora, Ubuntu, and SUSE.
>
> As near as I can tell, sendmail already runs in split mode on non-Redhat based systems.
>
> On Thu, Jun 15, 2017 at 6:00 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
>       This might be a crazy question ... Are you updates done for all
> of the changes you were making? I have not tested them myself.
>
> -- Jerry Benton www.mailborder.com<http://www.mailborder.com>
>
>
> On Thu, Jun 15, 2017 at 5:46 PM, Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
>       Paul,
> Wait for Mr. Benton to release the next update.  It will contain systemd enhancements for sendmail and mailscanner.
>
> On Thu, Jun 15, 2017 at 4:54 PM, Paul Scott <sales at edenusa.com<mailto:sales at edenusa.com>> wrote:
>
>       I am planning on upgrading our Sendmail server to CentOS 7.0, and am wondering if there any hints from you guys, on what to expect, or what difficulties I may run into, etc.  This will be a brand-new fresh
>       install on all new hardware, then install MailScanner and migrate our mailboxes over.  Please let me know.  Thank you so much!
>
>
>
>       Sincerely,
>
>
>
>       Paul Scott, Engineer
>
>       Eden USA, Incorporated
>       Event Production Services Since 1995
>       Los Angeles-Las Vegas-New York
>       sales at edenusa.com<mailto:sales at edenusa.com> OR edenusasales at gmail.com<mailto:edenusasales at gmail.com>
>       Telephone(s): 866.501.3336<tel:866.501.3336> OR 951.505.6967<tel:951.505.6967>
>       Fax: 866.502.3336<tel:866.502.3336>
>
>
>
>       WEBSITE: https://www.edenusa.com
>
>       FACEBOOK: http://www.facebook.com/edenusainc
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
> Shawn Iverson, CETLDirector of Technology Rush County Schools
> 765-932-3901 x271<tel:765-932-3901%20x271>
> iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>
>
> [uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs
> _UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ]
> [uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs
> _QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
> Shawn Iverson, CETLDirector of Technology Rush County Schools
> 765-932-3901 x271<tel:765-932-3901%20x271>
> iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>
>
> [uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs
> _UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ]
> [uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs
> _QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170801/1391c691/attachment.html>

From kevin.miller at juneau.org  Tue Aug  1 16:17:37 2017
From: kevin.miller at juneau.org (Kevin Miller)
Date: Tue, 1 Aug 2017 16:17:37 +0000
Subject: Mailman test
In-Reply-To: <024201d30a74$a70345d0$f509d170$@mailborder.com>
References: <024201d30a74$a70345d0$f509d170$@mailborder.com>
Message-ID: <a8f6063e26b74975803fc8e8e085df2f@City-Exch-DB2.cbj.local>

Must have been a Monday...

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Monday, July 31, 2017 7:17 PM
To: 'MailScanner Discussion'
Subject: Mailman test

Because I broke it earlier ?


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From danita at caledonia.net  Tue Aug  1 21:16:06 2017
From: danita at caledonia.net (Danita Zanre)
Date: Tue, 1 Aug 2017 14:16:06 -0700
Subject: By Domain Settings
Message-ID: <etPan.5980ef96.7d00645d.223c@caledonia.net>

Hi! ?I?m attempting to set a particular domain to ?mark and deliver? their messages.

So I have a mydomain.conf file in the /etc/MailScanner/conf.d directory that says this:

To	*@mydomain.com	store deliver

I?ve also tried?

To	*@zanre.com	High Scoring Spam Actions =?store deliver?"X-Spam-Status: Yes"

I obviously just don?t quite get what this file is supposed to look like.

What I really want is for any mail to this domain the items are marked as required, but then delivered and stored. ?Non-Spam and Spam are already set to deliver, but High Scoring Spam is not. ?I only want this one domain to have their High Scoring spam marked and sent to them.

Help please!

Thanks.



Danita Zanr?, Move Out of the Office
I love my job, and you can too!
Tel: (720) 319-7530 - Caledonia.Net?LLC
Tel: (720) 319-8240 - Move Out of the Office

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170801/05a54aa0/attachment.html>

From mark at msapiro.net  Wed Aug  2 04:38:47 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 1 Aug 2017 21:38:47 -0700
Subject: By Domain Settings
In-Reply-To: <etPan.5980ef96.7d00645d.223c@caledonia.net>
References: <etPan.5980ef96.7d00645d.223c@caledonia.net>
Message-ID: <f482bcd8-4798-1947-0d44-16678d177856@msapiro.net>

On 08/01/2017 02:16 PM, Danita Zanre wrote:
> 
> I obviously just don?t quite get what this file is supposed to look like.
> 
> 
> What I really want is for any mail to this domain the items are marked
> as required, but then delivered and stored.  Non-Spam and Spam are
> already set to deliver, but High Scoring Spam is not.  I only want this
> one domain to have their High Scoring spam marked and sent to them.


Read the documentation about rulesets at /etc/MailScanner/rules/README
and /etc/MailScanner/rules/EXAMPLES. There is also documentation in
Chapter 5 of the manual at
<https://s3.amazonaws.com/msv5/docs/ms-admin-guide.pdf>

What you want in your MailScanner configuration, e.g., in conf.d, is a
file which contains a line like

High Scoring Spam Actions = %rules-dir%/some.name.rules

some.name is anything you want, e.g., high.spam.action.rules, but the
last part of the name is .rules. Then you create that file in the rules
directory (normally /etc/MailScanner/rules) and it contains

To	*@mydomain.com	store,deliver
FromOrTo	default	store

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From danita at caledonia.net  Wed Aug  2 18:00:34 2017
From: danita at caledonia.net (Danita Zanre)
Date: Wed, 2 Aug 2017 11:00:34 -0700
Subject: By Domain Settings
In-Reply-To: <f482bcd8-4798-1947-0d44-16678d177856@msapiro.net>
References: <etPan.5980ef96.7d00645d.223c@caledonia.net>
 <f482bcd8-4798-1947-0d44-16678d177856@msapiro.net>
Message-ID: <etPan.59821342.206199d.223c@caledonia.net>

Thanks - working now. ?I will have to admit that without your explicit instructions, I doubt I ever would have figured this out. ?Indeed it is ?documented?, but not in a way that made my brain click. ?Whoever is in charge of the examples, this would be a good example to add, because the other examples didn?t turn on the lightbulb. ?However, now that I see what needs to be done for ?my example? it all makes perfect sense. ?I used to offer this type of granular ?mark and deliver? to domains and users pre-Mailscanner, but had quietly pretended it didn?t exist any longer, because I just couldn?t figure it out :-) - now I can get back to micromanaging. ?Hmmm - maybe it would have been best to not have understood rulesets!

Thanks again for your assistance.


Danita Zanr?, Move Out of the Office
I love my job, and you can too!
Tel: (720) 319-7530 - Caledonia.Net?LLC
Tel: (720) 319-8240 - Move Out of the Office


On August 1, 2017 at 9:40:09 PM, Mark Sapiro (mark at msapiro.net) wrote:

On 08/01/2017 02:16 PM, Danita Zanre wrote:
>  
> I obviously just don?t quite get what this file is supposed to look like.
>  
>  
> What I really want is for any mail to this domain the items are marked
> as required, but then delivered and stored. Non-Spam and Spam are
> already set to deliver, but High Scoring Spam is not. I only want this
> one domain to have their High Scoring spam marked and sent to them.


Read the documentation about rulesets at /etc/MailScanner/rules/README
and /etc/MailScanner/rules/EXAMPLES. There is also documentation in
Chapter 5 of the manual at
<https://s3.amazonaws.com/msv5/docs/ms-admin-guide.pdf>

What you want in your MailScanner configuration, e.g., in conf.d, is a
file which contains a line like

High Scoring Spam Actions = %rules-dir%/some.name.rules

some.name is anything you want, e.g., high.spam.action.rules, but the
last part of the name is .rules. Then you create that file in the rules
directory (normally /etc/MailScanner/rules) and it contains

To	*@mydomain.com	store,deliver
FromOrTo	default	store

--  
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan


--  
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


--  
This message has been scanned for viruses and
dangerous content by Iris MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170802/3304000d/attachment.html>

From jerry.benton at mailborder.com  Thu Aug  3 05:03:07 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 3 Aug 2017 01:03:07 -0400
Subject: Phishing Server Change
Message-ID: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605




From thom at vdb.nl  Thu Aug  3 13:45:40 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Thu, 3 Aug 2017 15:45:40 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
Message-ID: <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>

Jerry, 

I am currently debugging a update to the script 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct? 



Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Jerry Benton" <jerry.benton at mailborder.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Donderdag 3 augustus 2017 07:03:07 
Onderwerp: Phishing Server Change 

Please use the updated version of the phishing updates script from 
http://phishing.mailscanner.info/ 

I am trying to reduce bandwidth and the new script uses curl as the primary 
method, which support gzip by default. The fallback is wget, which uses more 
bandwidth. Most servers are still using the older update script version that 
uses wget as the primary method. (You cannot just tell wget to use gzip 
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the 
bad phishing file transfer size is 280081 and with curl it is 119027. That 
is almost half the transfer size. I would like to try to get that 550GB 
number down. I don't want to have to pull out the big stick and start 
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour. 
They get updated six times per day. If you are running every hour, please 
change your cron settings to something less taxing. Again, I don't want to 
pull out the big stick and start throttling IPs that are updating too often. 


-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170803/bac2ce1e/attachment.html>

From jerry.benton at mailborder.com  Thu Aug  3 14:42:51 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 3 Aug 2017 10:42:51 -0400
Subject: Phishing Server Change
In-Reply-To: <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
Message-ID: <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info>
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170803/14d2fa34/attachment.html>

From jerry.benton at mailborder.com  Thu Aug  3 14:45:54 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 3 Aug 2017 10:45:54 -0400
Subject: Phishing Server Change
In-Reply-To: <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
Message-ID: <049101d30c67$36113ae0$a233b0a0$@mailborder.com>

Thom,

 

If you can get curl to do the same, I would appreciate that. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170803/56e72bcc/attachment.html>

From michael at weiser.dinsnail.net  Thu Aug  3 15:38:22 2017
From: michael at weiser.dinsnail.net (Michael Weiser)
Date: Thu, 3 Aug 2017 17:38:22 +0200
Subject: Phishing Server Change
In-Reply-To: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
Message-ID: <20170803153822.GA32616@weiser.dinsnail.net>

Hi Jerry,

On Thu, Aug 03, 2017 at 01:03:07AM -0400, Jerry Benton wrote:

> Please use the updated version of the phishing updates script from
> http://phishing.mailscanner.info/

I just diffed the scripts with my v5 install and looked at the GitHub
repo. From that, do I assume correctly that v5 users don't need to do
anything because curl has been the default ever since the initial commit
in 2016?

Another tought: TLS supports compression which would be transparent and
therefore work with wget as well because it's handled by the TLS
implementation. It would also prevent tampering with the update in
transit and make it possible to verify authenticity of the update
source. With Let's Encrypt you wouldn't need to pay anything for the
certificate. The CRIME exploit based on TLS compression does not apply
here because the content is completely public and information leakage
isn't a problem.

The only problem I see is that some Linux distributions have actually
compiled TLS compression support out of the SSL implementations they
ship because of CRIME...
-- 
Thanks,
Michael

From michael at weiser.dinsnail.net  Thu Aug  3 18:41:05 2017
From: michael at weiser.dinsnail.net (Michael Weiser)
Date: Thu, 3 Aug 2017 20:41:05 +0200
Subject: Phishing Server Change
In-Reply-To: <20170803153822.GA32616@weiser.dinsnail.net>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <20170803153822.GA32616@weiser.dinsnail.net>
Message-ID: <20170803184105.GA807@weiser.dinsnail.net>

Hi again,

sorry for the noise.

On Thu, Aug 03, 2017 at 05:38:22PM +0200, Michael Weiser wrote:

> The only problem I see is that some Linux distributions have actually
> compiled TLS compression support out of the SSL implementations they
> ship because of CRIME...

Correction: That info off the top of my head seems to be outdated: Just
checked the package sources of Debian jessie/stretch, Fedora RawHide,
Gentoo, CentOS 6/7 and openSUSE Tumbleweed. They all seem to have it
enabled in OpenSSL. OpenSUSE actually has a ChangeLog entry confirming
that it was disabled as a stop-gap-measure once but that patch is gone
now.

CentOS (and likely RHEL) as of 6.9 and 7.3 still have a patch that
requires the user to set environment variable OPENSSL_DEFAULT_ZLIB in
order to get compression enabled. This would need be put into the update
scripts.

Funnily enough curl has TLS compression statically disabled on the
client side: https://curl.haxx.se/mail/lib-2012-11/0117.html. So we'd
need curl to fall back to HTTP compression still.

BTW: wget -N and curl -z seem to work well to avoid redownload:

# rm phishing.bad.sites.conf
# time wget -N http://phishing.mailscanner.info/phishing.bad.sites.conf
phishing.bad.sites.conf             100%[============>] 273.56K  96.2KB/s    in 2.8s
2017-08-03 20:21:28 (96.2 KB/s) - 'phishing.bad.sites.conf' saved [280125/280125]
real    0m5.002s
# time wget -N http://phishing.mailscanner.info/phishing.bad.sites.conf
File 'phishing.bad.sites.conf' not modified on server. Omitting download.
real    0m0.888s

# rm phishing.bad.sites.conf
# time curl -z phishing.bad.sites.conf -o phishing.bad.sites.conf -R http://phishing.mailscanner.info/phishing.bad.sites.conf
Warning: Illegal date format for -z, --time-cond (and not a file name).
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
real    0m3.788s
# time curl -z phishing.bad.sites.conf -o phishing.bad.sites.conf -R http://phishing.mailscanner.info/phishing.bad.sites.conf
real    0m0.518s
-- 
Micha

From kevin.miller at juneau.org  Thu Aug  3 18:45:56 2017
From: kevin.miller at juneau.org (Kevin Miller)
Date: Thu, 3 Aug 2017 18:45:56 +0000
Subject: Phishing Server Change
In-Reply-To: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
Message-ID: <55844dfe17ba471e91837fc991a280ca@City-Exch-DB2.cbj.local>

Mine were in cron.daily, so that's good.  I replaced them with the new script so they should now use compressed curl.

I was thinking on ways to lighten the load.  Perhaps you could auto-publish a TXT record in DNS with a serial number in it that indicated the version of phishing conf files.  Something like 
  PhishingVersion IN TXT "20170803-1037"
to indicate the publishing date/time of the current file.

The download script could do an lookup on the DNS record, write it to a file, and the next time the script runs, compare the historical file to the current DNS result.  Or it could be imbedded as a comment in the conf file, then parsed and compared to the DNS lookup.  If the local file is up to date, then bail.  If not, download.  Either way, a DNS lookup is much lighter weight than a full download.

Just a thought.

Your work is appreciated...

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357


-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Wednesday, August 02, 2017 9:03 PM
To: 'MailScanner Discussion'
Subject: Phishing Server Change

Please use the updated version of the phishing updates script from http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary method, which support gzip by default. The fallback is wget, which uses more bandwidth. Most servers are still using the older update script version that uses wget as the primary method. (You cannot just tell wget to use gzip because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the bad phishing file transfer size is 280081 and with curl it is 119027. That is almost half the transfer size. I would like to try to get that 550GB number down. I don't want to have to pull out the big stick and start blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please change your cron settings to something less taxing. Again, I don't want to pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605





--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From thom at vdb.nl  Fri Aug  4 05:52:09 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Fri, 4 Aug 2017 07:52:09 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
Message-ID: <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>

Jerry, 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget). 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted) 

Testing of the script and feedback is highly appriciated. 

I will do the same for the other script in the upcoming day. 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Jerry Benton" <jerry.benton at mailborder.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Donderdag 3 augustus 2017 16:42:51 
Onderwerp: RE: Phishing Server Change 



Thom, 



Yes, that is correct. I can disable the rejections so you can do your testing. 



Ok ? done. I disabled the rejects. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 






From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon 
Sent: Thursday, August 3, 2017 9:46 AM 
To: MailScanner Discussion <mailscanner at lists.mailscanner.info> 
Subject: Re: Phishing Server Change 





Jerry, 





I am currently debugging a update to the script 





I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct? 











Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 07:03:07 
Onderwerp: Phishing Server Change 





Please use the updated version of the phishing updates script from 
http://phishing.mailscanner.info/ 

I am trying to reduce bandwidth and the new script uses curl as the primary 
method, which support gzip by default. The fallback is wget, which uses more 
bandwidth. Most servers are still using the older update script version that 
uses wget as the primary method. (You cannot just tell wget to use gzip 
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the 
bad phishing file transfer size is 280081 and with curl it is 119027. That 
is almost half the transfer size. I would like to try to get that 550GB 
number down. I don't want to have to pull out the big stick and start 
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour. 
They get updated six times per day. If you are running every hour, please 
change your cron settings to something less taxing. Again, I don't want to 
pull out the big stick and start throttling IPs that are updating too often. 


-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/87b377ed/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: update_bad_phishing_sites
Type: application/x-shellscript
Size: 7121 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/87b377ed/attachment.bin>

From jerry.benton at mailborder.com  Fri Aug  4 05:54:27 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 01:54:27 -0400
Subject: Phishing Server Change
In-Reply-To: <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
Message-ID: <004401d30ce6$22516f50$66f44df0$@mailborder.com>

Thom,

 

Thank you. Does someone have time to help test? I am rather swamped at the moment. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget).

 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted)

 

Testing of the script and feedback is highly appriciated.

 

I will do the same for the other script in the upcoming day.

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 16:42:51
Onderwerp: RE: Phishing Server Change

 

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/cfc56aec/attachment-0001.html>

From iversons at rushville.k12.in.us  Fri Aug  4 14:37:45 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 4 Aug 2017 10:37:45 -0400
Subject: Phishing Server Change
In-Reply-To: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
Message-ID: <CABu_8z+mNvuMdYvT=oGXi+BMHQK4_Qu5GJSRd8hocgzBnYET4Q@mail.gmail.com>

Jerry,

I'll test.  I am already testing ms-init, packaging.....etc...

On Aug 3, 2017 1:03 AM, "Jerry Benton" <jerry.benton at mailborder.com> wrote:

> Please use the updated version of the phishing updates script from
> http://phishing.mailscanner.info/
>
> I am trying to reduce bandwidth and the new script uses curl as the primary
> method, which support gzip by default. The fallback is wget, which uses
> more
> bandwidth. Most servers are still using the older update script version
> that
> uses wget as the primary method. (You cannot just tell wget to use gzip
> because the downloaded file ends up staying compressed and thus useless.)
>
> The phishing server does about 550GB per month in transfers. Using wget the
> bad phishing file transfer size is 280081 and with curl it is 119027. That
> is almost half the transfer size. I would like to try to get that 550GB
> number down. I don't want to have to pull out the big stick and start
> blocking wget user agents, so please help me out here.
>
> As a side note, there is no point in updating the phishing files every
> hour.
> They get updated six times per day. If you are running every hour, please
> change your cron settings to something less taxing. Again, I don't want to
> pull out the big stick and start throttling IPs that are updating too
> often.
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1 (843) 800-8605
> +44 (020) 3883-8605
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/88222445/attachment.html>

From jerry.benton at mailborder.com  Fri Aug  4 14:54:24 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 10:54:24 -0400
Subject: Phishing Server Change
In-Reply-To: <CABu_8z+mNvuMdYvT=oGXi+BMHQK4_Qu5GJSRd8hocgzBnYET4Q@mail.gmail.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <CABu_8z+mNvuMdYvT=oGXi+BMHQK4_Qu5GJSRd8hocgzBnYET4Q@mail.gmail.com>
Message-ID: <008601d30d31$9007df70$b0179e50$@mailborder.com>

If anyone wants to test this with the old server that has wget enabled, please update your hosts to use:

 

198.199.100.78 phishing.mailscanner.info

 

or

 

2604:a880:1:20::35c1:f001 phishing.mailscanner.info

 

 

That is the old server and it has wget enabled. I will leave it on for a week or so. Make sure you remove the entry from the test file afterwards !

 

 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 4, 2017 10:38 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

I'll test.  I am already testing ms-init, packaging.....etc...

 

On Aug 3, 2017 1:03 AM, "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.)

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here.

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605> 
+44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605> 





--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/6b08ebee/attachment.html>

From jerry.benton at mailborder.com  Fri Aug  4 15:18:03 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 11:18:03 -0400
Subject: Phishing Server Change
In-Reply-To: <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
Message-ID: <00b501d30d34$de7caed0$9b760c70$@mailborder.com>

I briefly reviewed this script. A couple of problems:

 

*	The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
*	The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)
*	The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget).

 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted)

 

Testing of the script and feedback is highly appriciated.

 

I will do the same for the other script in the upcoming day.

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 16:42:51
Onderwerp: RE: Phishing Server Change

 

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/e11087f1/attachment.html>

From jerry.benton at mailborder.com  Fri Aug  4 15:22:43 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 11:22:43 -0400
Subject: Phishing Server Change
In-Reply-To: <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
Message-ID: <00cc01d30d35$84f91320$8eeb3960$@mailborder.com>

Another note:

 

*	The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed. 

 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: Jerry Benton [mailto:jerry.benton at mailborder.com] 
Sent: Friday, August 4, 2017 11:18 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Phishing Server Change

 

I briefly reviewed this script. A couple of problems:

 

*	The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
*	The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)
*	The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget).

 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted)

 

Testing of the script and feedback is highly appriciated.

 

I will do the same for the other script in the upcoming day.

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 16:42:51
Onderwerp: RE: Phishing Server Change

 

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/7754d4e6/attachment.html>

From jerry.benton at mailborder.com  Fri Aug  4 15:36:12 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 11:36:12 -0400
Subject: Phishing Server Change
In-Reply-To: <00cc01d30d35$84f91320$8eeb3960$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
 <00cc01d30d35$84f91320$8eeb3960$@mailborder.com>
Message-ID: <00e301d30d37$6738e2a0$35aaa7e0$@mailborder.com>

Another note:

 

*	The mailscanner restart should be a configurable option in the /etc/mailscanner/defaults file. It should be off by default. Logic something like this:

 

 

 

--- /etc/mailscanner/defaults

 

# restart mailscanner after update. 0 = off, 1 = on

ms_cron_ps_restart = 0

 

 

--- /usr/sbin/ms-update-bad-sites

 

ms_cron_ps_restart = 0

 

if [ -f /etc/MailScanner/defaults ] ; then

       . /etc/MailScanner/defaults

fi

 

?.

 

if [ $ ms_cron_ps_restart = 0 ]; then

       do_restart_here();

fi

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: Jerry Benton [mailto:jerry.benton at mailborder.com] 
Sent: Friday, August 4, 2017 11:23 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Phishing Server Change

 

Another note:

 

*	The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed. 

 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: Jerry Benton [mailto:jerry.benton at mailborder.com] 
Sent: Friday, August 4, 2017 11:18 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: RE: Phishing Server Change

 

I briefly reviewed this script. A couple of problems:

 

*	The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
*	The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)
*	The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget).

 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted)

 

Testing of the script and feedback is highly appriciated.

 

I will do the same for the other script in the upcoming day.

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 16:42:51
Onderwerp: RE: Phishing Server Change

 

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/b1e6deba/attachment-0001.html>

From thom at vdb.nl  Fri Aug  4 17:21:45 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Fri, 4 Aug 2017 19:21:45 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
Message-ID: <973739727.62958.1501867305473.JavaMail.zimbra@vdb.nl>

Jerry, 

>> The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 

>> The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed. 

The problem is wget. To save bandwidth you want to run wget with the -N option (wget will only download if the remote file is newer than the local file), but the -O does not work together with the -N (curl does not have this problem) 

To put it simple: 

curl -z $CONFIGDIR/phishing.bad.sites.conf --compressed -o $CONFIGDIR/phishing.bad.sites.conf.master $THEURL 

curl only downloads the remote phishing.bad.sites.conf to the local file to $CONFIGDIR/phishing.bad.sites.conf.master if the remote file is newer than the local phishing.bad.sites.conf 

(curl is great) 

wget does not support checking against an other file 


If you want the script to work like you want it to work, there are two options: 
a) we have to drop wget support because you can't check wether a newer version of the file is available 
b) on the server there need to be both a phishing.bad.sites.conf but also a phishing.bad.sites.conf.master (same file, but wget needs to check against something with the same filename wether it has changed) 


>> The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.) 
>> The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 

Will add this to the script 


Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Jerry Benton" <jerry.benton at mailborder.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Vrijdag 4 augustus 2017 17:18:03 
Onderwerp: RE: Phishing Server Change 



I briefly reviewed this script. A couple of problems: 



    * The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
    * The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.) 
    * The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 







-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 






From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon 
Sent: Friday, August 4, 2017 1:52 AM 
To: MailScanner Discussion <mailscanner at lists.mailscanner.info> 
Subject: Re: Phishing Server Change 





Jerry, 





Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget). 





New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted) 





Testing of the script and feedback is highly appriciated. 





I will do the same for the other script in the upcoming day. 





Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 16:42:51 
Onderwerp: RE: Phishing Server Change 





Thom, 



Yes, that is correct. I can disable the rejections so you can do your testing. 



Ok ? done. I disabled the rejects. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Thursday, August 3, 2017 9:46 AM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





I am currently debugging a update to the script 





I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct? 











Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 07:03:07 
Onderwerp: Phishing Server Change 





Please use the updated version of the phishing updates script from 
http://phishing.mailscanner.info/ 

I am trying to reduce bandwidth and the new script uses curl as the primary 
method, which support gzip by default. The fallback is wget, which uses more 
bandwidth. Most servers are still using the older update script version that 
uses wget as the primary method. (You cannot just tell wget to use gzip 
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the 
bad phishing file transfer size is 280081 and with curl it is 119027. That 
is almost half the transfer size. I would like to try to get that 550GB 
number down. I don't want to have to pull out the big stick and start 
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour. 
They get updated six times per day. If you are running every hour, please 
change your cron settings to something less taxing. Again, I don't want to 
pull out the big stick and start throttling IPs that are updating too often. 


-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/c6e29238/attachment.html>

From jerry.benton at mailborder.com  Fri Aug  4 17:42:24 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 13:42:24 -0400
Subject: Phishing Server Change
In-Reply-To: <973739727.62958.1501867305473.JavaMail.zimbra@vdb.nl>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
 <973739727.62958.1501867305473.JavaMail.zimbra@vdb.nl>
Message-ID: <011701d30d49$08702fa0$19508ee0$@mailborder.com>

Thom,

 

I can add a .master version of both files. That is not a problem. I will make a note to do that this weekend.

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:22 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Phishing Server Change

 

Jerry,

 

>> The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script.

 

>> The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed.

 

The problem is wget. To save bandwidth you want to run wget with the -N option (wget will only download if the remote file is newer than the local file), but the -O does not work together with the -N (curl does not have this problem)

 

To put it simple:

 

curl -z $CONFIGDIR/phishing.bad.sites.conf --compressed -o $CONFIGDIR/phishing.bad.sites.conf.master $THEURL

 

curl only downloads the remote phishing.bad.sites.conf to the local file to $CONFIGDIR/phishing.bad.sites.conf.master if the remote file is newer than the local phishing.bad.sites.conf

 

(curl is great) 

 

wget does not support checking against an other file

 

 

If you want the script to work like you want it to work, there are two options:

a) we have to drop wget support because you can't check wether a newer version of the file is available

b) on the server there need to be both a phishing.bad.sites.conf but also a phishing.bad.sites.conf.master (same file, but wget needs to check against something with the same filename wether it has changed)

 

 

>> The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)

>> The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms.

 

Will add this to the script

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Vrijdag 4 augustus 2017 17:18:03
Onderwerp: RE: Phishing Server Change

 

I briefly reviewed this script. A couple of problems:

 

*	The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
*	The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)
*	The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget).

 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted)

 

Testing of the script and feedback is highly appriciated.

 

I will do the same for the other script in the upcoming day.

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 16:42:51
Onderwerp: RE: Phishing Server Change

 

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/8eff2742/attachment.html>

From jerry.benton at mailborder.com  Fri Aug  4 19:16:11 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 4 Aug 2017 15:16:11 -0400
Subject: Phishing Server Change
In-Reply-To: <011701d30d49$08702fa0$19508ee0$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
 <973739727.62958.1501867305473.JavaMail.zimbra@vdb.nl>
 <011701d30d49$08702fa0$19508ee0$@mailborder.com>
Message-ID: <016101d30d56$22680fb0$67382f10$@mailborder.com>

.master copy files have been added to the update server. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: Jerry Benton [mailto:jerry.benton at mailborder.com] 
Sent: Friday, August 4, 2017 1:42 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Phishing Server Change

 

Thom,

 

I can add a .master version of both files. That is not a problem. I will make a note to do that this weekend.

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:22 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

>> The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script.

 

>> The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed.

 

The problem is wget. To save bandwidth you want to run wget with the -N option (wget will only download if the remote file is newer than the local file), but the -O does not work together with the -N (curl does not have this problem)

 

To put it simple:

 

curl -z $CONFIGDIR/phishing.bad.sites.conf --compressed -o $CONFIGDIR/phishing.bad.sites.conf.master $THEURL

 

curl only downloads the remote phishing.bad.sites.conf to the local file to $CONFIGDIR/phishing.bad.sites.conf.master if the remote file is newer than the local phishing.bad.sites.conf

 

(curl is great) 

 

wget does not support checking against an other file

 

 

If you want the script to work like you want it to work, there are two options:

a) we have to drop wget support because you can't check wether a newer version of the file is available

b) on the server there need to be both a phishing.bad.sites.conf but also a phishing.bad.sites.conf.master (same file, but wget needs to check against something with the same filename wether it has changed)

 

 

>> The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)

>> The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms.

 

Will add this to the script

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Vrijdag 4 augustus 2017 17:18:03
Onderwerp: RE: Phishing Server Change

 

I briefly reviewed this script. A couple of problems:

 

*	The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
*	The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.)
*	The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Friday, August 4, 2017 1:52 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget).

 

New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted)

 

Testing of the script and feedback is highly appriciated.

 

I will do the same for the other script in the upcoming day.

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 16:42:51
Onderwerp: RE: Phishing Server Change

 

Thom,

 

Yes, that is correct. I can disable the rejections so you can do your testing. 

 

Ok ? done. I disabled the rejects. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Thom van der Boon
Sent: Thursday, August 3, 2017 9:46 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Phishing Server Change

 

Jerry,

 

I am currently debugging a update to the script 

 

I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct?

 

 

 

Met vriendelijke groet, Best regards,

 


Thom van der Boon
E-Mail: thom at vdb.nl <mailto:thom at vdb.nl> 

 



=====

 

 

 

Thom.H. van der Boon b.v.
Transito 4

6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

 

  _____  

Van: "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Verzonden: Donderdag 3 augustus 2017 07:03:07
Onderwerp: Phishing Server Change

 

Please use the updated version of the phishing updates script from
http://phishing.mailscanner.info/

I am trying to reduce bandwidth and the new script uses curl as the primary
method, which support gzip by default. The fallback is wget, which uses more
bandwidth. Most servers are still using the older update script version that
uses wget as the primary method. (You cannot just tell wget to use gzip
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the
bad phishing file transfer size is 280081 and with curl it is 119027. That
is almost half the transfer size. I would like to try to get that 550GB
number down. I don't want to have to pull out the big stick and start
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour.
They get updated six times per day. If you are running every hour, please
change your cron settings to something less taxing. Again, I don't want to
pull out the big stick and start throttling IPs that are updating too often.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605





-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170804/625ca992/attachment-0001.html>

From thom at vdb.nl  Sat Aug  5 02:43:41 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Sat, 5 Aug 2017 04:43:41 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <016101d30d56$22680fb0$67382f10$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <2042541808.56245.1501767940851.JavaMail.zimbra@vdb.nl>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
 <973739727.62958.1501867305473.JavaMail.zimbra@vdb.nl>
 <011701d30d49$08702fa0$19508ee0$@mailborder.com>
 <016101d30d56$22680fb0$67382f10$@mailborder.com>
Message-ID: <696393214.63345.1501901021557.JavaMail.zimbra@vdb.nl>

Hi 

Attached the two new scripts for testing 

Both curl and wget will only download when a new file is on the remote server. curl is the prefered download method, wget as a backup 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Jerry Benton" <jerry.benton at mailborder.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Vrijdag 4 augustus 2017 21:16:11 
Onderwerp: RE: Phishing Server Change 



.master copy files have been added to the update server. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 






From: Jerry Benton [mailto:jerry.benton at mailborder.com] 
Sent: Friday, August 4, 2017 1:42 PM 
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info> 
Subject: RE: Phishing Server Change 




Thom, 



I can add a .master version of both files. That is not a problem. I will make a note to do that this weekend. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Friday, August 4, 2017 1:22 PM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





>> The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 





>> The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed. 





The problem is wget. To save bandwidth you want to run wget with the -N option (wget will only download if the remote file is newer than the local file), but the -O does not work together with the -N (curl does not have this problem) 





To put it simple: 





curl -z $CONFIGDIR/phishing.bad.sites.conf --compressed -o $CONFIGDIR/phishing.bad.sites.conf.master $THEURL 





curl only downloads the remote phishing.bad.sites.conf to the local file to $CONFIGDIR/phishing.bad.sites.conf.master if the remote file is newer than the local phishing.bad.sites.conf 





(curl is great) 





wget does not support checking against an other file 








If you want the script to work like you want it to work, there are two options: 


a) we have to drop wget support because you can't check wether a newer version of the file is available 


b) on the server there need to be both a phishing.bad.sites.conf but also a phishing.bad.sites.conf.master (same file, but wget needs to check against something with the same filename wether it has changed) 








>> The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.) 


>> The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 





Will add this to the script 








Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Vrijdag 4 augustus 2017 17:18:03 
Onderwerp: RE: Phishing Server Change 





I briefly reviewed this script. A couple of problems: 



    * The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
    * The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.) 
    * The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 







-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Friday, August 4, 2017 1:52 AM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget). 





New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted) 





Testing of the script and feedback is highly appriciated. 





I will do the same for the other script in the upcoming day. 





Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 16:42:51 
Onderwerp: RE: Phishing Server Change 





Thom, 



Yes, that is correct. I can disable the rejections so you can do your testing. 



Ok ? done. I disabled the rejects. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Thursday, August 3, 2017 9:46 AM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





I am currently debugging a update to the script 





I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct? 











Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 07:03:07 
Onderwerp: Phishing Server Change 





Please use the updated version of the phishing updates script from 
http://phishing.mailscanner.info/ 

I am trying to reduce bandwidth and the new script uses curl as the primary 
method, which support gzip by default. The fallback is wget, which uses more 
bandwidth. Most servers are still using the older update script version that 
uses wget as the primary method. (You cannot just tell wget to use gzip 
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the 
bad phishing file transfer size is 280081 and with curl it is 119027. That 
is almost half the transfer size. I would like to try to get that 550GB 
number down. I don't want to have to pull out the big stick and start 
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour. 
They get updated six times per day. If you are running every hour, please 
change your cron settings to something less taxing. Again, I don't want to 
pull out the big stick and start throttling IPs that are updating too often. 


-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170805/b26d1282/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: update_bad_phishing_sites
Type: application/x-shellscript
Size: 7140 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170805/b26d1282/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: update_phishing_sites
Type: application/x-shellscript
Size: 7184 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170805/b26d1282/attachment-0001.bin>

From thom at vdb.nl  Sun Aug  6 06:37:18 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Sun, 6 Aug 2017 08:37:18 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <696393214.63345.1501901021557.JavaMail.zimbra@vdb.nl>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
 <048501d30c66$c8a1a2b0$59e4e810$@mailborder.com>
 <1255878578.58355.1501825929713.JavaMail.zimbra@vdb.nl>
 <00b501d30d34$de7caed0$9b760c70$@mailborder.com>
 <973739727.62958.1501867305473.JavaMail.zimbra@vdb.nl>
 <011701d30d49$08702fa0$19508ee0$@mailborder.com>
 <016101d30d56$22680fb0$67382f10$@mailborder.com>
 <696393214.63345.1501901021557.JavaMail.zimbra@vdb.nl>
Message-ID: <757290881.64177.1502001438685.JavaMail.zimbra@vdb.nl>

Jerry, 

I have been testing my scripts for the past day or so. I have been starting the script every five minutes and it works like it should work: Only if a newer file is on the server, it will be downloaded. 

One issue: Only if both scripts are restarting MailScanner at the same time, the second one reports that mailscanner is not started. But everything keeps working. So 
the only thing I do want to change is to add a random delay within 24 or so minutes 


Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Thom van der Boon" <thom at vdb.nl> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Zaterdag 5 augustus 2017 04:43:41 
Onderwerp: Re: Phishing Server Change 

Hi 

Attached the two new scripts for testing 

Both curl and wget will only download when a new file is on the remote server. curl is the prefered download method, wget as a backup 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Jerry Benton" <jerry.benton at mailborder.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Vrijdag 4 augustus 2017 21:16:11 
Onderwerp: RE: Phishing Server Change 



.master copy files have been added to the update server. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 






From: Jerry Benton [mailto:jerry.benton at mailborder.com] 
Sent: Friday, August 4, 2017 1:42 PM 
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info> 
Subject: RE: Phishing Server Change 




Thom, 



I can add a .master version of both files. That is not a problem. I will make a note to do that this weekend. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Friday, August 4, 2017 1:22 PM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





>> The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 





>> The script would have to keep a copy of the .master file instead of deleting it as it does in the current script in order to determine if the file on the update server has changed. 





The problem is wget. To save bandwidth you want to run wget with the -N option (wget will only download if the remote file is newer than the local file), but the -O does not work together with the -N (curl does not have this problem) 





To put it simple: 





curl -z $CONFIGDIR/phishing.bad.sites.conf --compressed -o $CONFIGDIR/phishing.bad.sites.conf.master $THEURL 





curl only downloads the remote phishing.bad.sites.conf to the local file to $CONFIGDIR/phishing.bad.sites.conf.master if the remote file is newer than the local phishing.bad.sites.conf 





(curl is great) 





wget does not support checking against an other file 








If you want the script to work like you want it to work, there are two options: 


a) we have to drop wget support because you can't check wether a newer version of the file is available 


b) on the server there need to be both a phishing.bad.sites.conf but also a phishing.bad.sites.conf.master (same file, but wget needs to check against something with the same filename wether it has changed) 








>> The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.) 


>> The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 





Will add this to the script 








Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Vrijdag 4 augustus 2017 17:18:03 
Onderwerp: RE: Phishing Server Change 





I briefly reviewed this script. A couple of problems: 



    * The logic of the script does not work as the current script. The current script downloads the file as .master and uses that file plus a .custom file to build the final list. It looks like this script was based on a very old version of the update script. 
    * The script should not restart mailscanner if mailscanner has been manually stopped. (mailscanner.off file is present.) 
    * The existence of /etc/init.d/mailscanner needs to be validated before being used. This file will not exist on a fully implemented systemd server and thus will not work across all platforms. 







-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Friday, August 4, 2017 1:52 AM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





Attached a almost totally rewritten update_bad_phishing_sites script.It uses curl and as a fallback wget. If the remote file is not updated, it will not download (with both curl and wget). 





New function: If a new phishing.bad.sites.conf is downloaded, mailscanner is reloaded (if that fails, mailscanner will be restarted) 





Testing of the script and feedback is highly appriciated. 





I will do the same for the other script in the upcoming day. 





Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 16:42:51 
Onderwerp: RE: Phishing Server Change 





Thom, 



Yes, that is correct. I can disable the rejections so you can do your testing. 



Ok ? done. I disabled the rejects. 






-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Thom van der Boon 
Sent: Thursday, August 3, 2017 9:46 AM 
To: MailScanner Discussion < mailscanner at lists.mailscanner.info > 
Subject: Re: Phishing Server Change 





Jerry, 





I am currently debugging a update to the script 





I am currently trying to get the wget part working that i only downloads when the remote file is newer... but the server refuses wget... is that correct? 











Met vriendelijke groet, Best regards, 






Thom van der Boon 
E-Mail: thom at vdb.nl 







===== 











Thom.H. van der Boon b.v. 
Transito 4 


6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 






Van: "Jerry Benton" < jerry.benton at mailborder.com > 
Aan: "MailScanner Discussion" < mailscanner at lists.mailscanner.info > 
Verzonden: Donderdag 3 augustus 2017 07:03:07 
Onderwerp: Phishing Server Change 





Please use the updated version of the phishing updates script from 
http://phishing.mailscanner.info/ 

I am trying to reduce bandwidth and the new script uses curl as the primary 
method, which support gzip by default. The fallback is wget, which uses more 
bandwidth. Most servers are still using the older update script version that 
uses wget as the primary method. (You cannot just tell wget to use gzip 
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the 
bad phishing file transfer size is 280081 and with curl it is 119027. That 
is almost half the transfer size. I would like to try to get that 550GB 
number down. I don't want to have to pull out the big stick and start 
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour. 
They get updated six times per day. If you are running every hour, please 
change your cron settings to something less taxing. Again, I don't want to 
pull out the big stick and start throttling IPs that are updating too often. 


-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170806/19a668ae/attachment.html>

From jorgeaaq at gmail.com  Sun Aug  6 17:14:21 2017
From: jorgeaaq at gmail.com (Jorge A Arenas Quezada)
Date: Sun, 6 Aug 2017 12:14:21 -0500
Subject: Recommended Platform
Message-ID: <000c01d30ed7$731638b0$5942aa10$@gmail.com>

Hi all

 

I know is difficult and everyone have an opinion maybe different but 

 

According to development, stability and management 

 

What would be the Linux platform ( or platforms ) recommended for run MailScanner

 

In this moment I have Centos with Sendmail for some time and is working 

 

Right now it is time to implement a new server and I am looking to validate if continue with the same platform or change to a  better combination of OS and MTA in terms of development or stability

 

I have no problem to learn and contribute with another platform 

 

Any comments would be appreciated 

 

 

Atte

Jorge A. Arenas Quezada

CSA Consultores

Av. Ayuntamiento 410A

Col El Encino, CP 20240

Aguascalientes, Ags. Mexico

Tel (449) 9783038  Extension 231

Cel (449) 4962807

Skype for Business: jorge.arenas at csags.com.mx <mailto:jorge.arenas at csags.com.mx> 

Skype: jorgeaaq at outlook.com <mailto:jorgeaaq at outlook.com> 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170806/481db175/attachment.html>

From jerry.benton at mailborder.com  Sun Aug  6 17:16:48 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 6 Aug 2017 13:16:48 -0400
Subject: Recommended Platform
In-Reply-To: <000c01d30ed7$731638b0$5942aa10$@gmail.com>
References: <000c01d30ed7$731638b0$5942aa10$@gmail.com>
Message-ID: <007301d30ed7$c9ec7230$5dc55690$@mailborder.com>

Any platform is fine as long as it is server grade. Things like Centos, Debian, Ubuntu LTS are fine. OS?s like Fedora are not good. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jorge A Arenas Quezada
Sent: Sunday, August 6, 2017 1:14 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: Recommended Platform

 

Hi all

 

I know is difficult and everyone have an opinion maybe different but 

 

According to development, stability and management 

 

What would be the Linux platform ( or platforms ) recommended for run MailScanner

 

In this moment I have Centos with Sendmail for some time and is working 

 

Right now it is time to implement a new server and I am looking to validate if continue with the same platform or change to a  better combination of OS and MTA in terms of development or stability

 

I have no problem to learn and contribute with another platform 

 

Any comments would be appreciated 

 

 

Atte

Jorge A. Arenas Quezada

CSA Consultores

Av. Ayuntamiento 410A

Col El Encino, CP 20240

Aguascalientes, Ags. Mexico

Tel (449) 9783038  Extension 231

Cel (449) 4962807

Skype for Business: jorge.arenas at csags.com.mx <mailto:jorge.arenas at csags.com.mx> 

Skype: jorgeaaq at outlook.com <mailto:jorgeaaq at outlook.com> 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170806/db0f3874/attachment.html>

From jorgeaaq at gmail.com  Sun Aug  6 19:24:40 2017
From: jorgeaaq at gmail.com (Jorge A Arenas Quezada)
Date: Sun, 6 Aug 2017 14:24:40 -0500
Subject: Recommended Platform
In-Reply-To: <007301d30ed7$c9ec7230$5dc55690$@mailborder.com>
References: <000c01d30ed7$731638b0$5942aa10$@gmail.com>
 <007301d30ed7$c9ec7230$5dc55690$@mailborder.com>
Message-ID: <001f01d30ee9$a7b14da0$f713e8e0$@gmail.com>

Thank you Ben ? understood

 

About the MTA, I read some problems and some advantages with one or other

 

What would be your recommendation, if is a new implementation and maybe Centos 7?

 

Thanks in advance

 

 

Atte

Jorge A. Arenas Quezada

CSA Consultores

Av. Ayuntamiento 410A

Col El Encino, CP 20240

Aguascalientes, Ags. Mexico

Tel (449) 9783038  Extension 231

Cel (449) 4962807

Skype for Business: jorge.arenas at csags.com.mx <mailto:jorge.arenas at csags.com.mx> 

Skype: jorgeaaq at outlook.com <mailto:jorgeaaq at outlook.com> 

 

 

 

From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: domingo, 6 de agosto de 2017 12:17 p. m.
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Recommended Platform

 

Any platform is fine as long as it is server grade. Things like Centos, Debian, Ubuntu LTS are fine. OS?s like Fedora are not good. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jorge A Arenas Quezada
Sent: Sunday, August 6, 2017 1:14 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Recommended Platform

 

Hi all

 

I know is difficult and everyone have an opinion maybe different but 

 

According to development, stability and management 

 

What would be the Linux platform ( or platforms ) recommended for run MailScanner

 

In this moment I have Centos with Sendmail for some time and is working 

 

Right now it is time to implement a new server and I am looking to validate if continue with the same platform or change to a  better combination of OS and MTA in terms of development or stability

 

I have no problem to learn and contribute with another platform 

 

Any comments would be appreciated 

 

 

Atte

Jorge A. Arenas Quezada

CSA Consultores

Av. Ayuntamiento 410A

Col El Encino, CP 20240

Aguascalientes, Ags. Mexico

Tel (449) 9783038  Extension 231

Cel (449) 4962807

Skype for Business: jorge.arenas at csags.com.mx <mailto:jorge.arenas at csags.com.mx> 

Skype: jorgeaaq at outlook.com <mailto:jorgeaaq at outlook.com> 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170806/216d013e/attachment.html>

From jerry.benton at mailborder.com  Sun Aug  6 19:28:46 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 6 Aug 2017 15:28:46 -0400
Subject: Recommended Platform
In-Reply-To: <001f01d30ee9$a7b14da0$f713e8e0$@gmail.com>
References: <000c01d30ed7$731638b0$5942aa10$@gmail.com>
 <007301d30ed7$c9ec7230$5dc55690$@mailborder.com>
 <001f01d30ee9$a7b14da0$f713e8e0$@gmail.com>
Message-ID: <008a01d30eea$393d2140$abb763c0$@mailborder.com>

In my opinion Postfix is the simplest to implement and manage. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jorge A Arenas Quezada
Sent: Sunday, August 6, 2017 3:25 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Recommended Platform

 

Thank you Ben ? understood

 

About the MTA, I read some problems and some advantages with one or other

 

What would be your recommendation, if is a new implementation and maybe Centos 7?

 

Thanks in advance

 

 

Atte

Jorge A. Arenas Quezada

CSA Consultores

Av. Ayuntamiento 410A

Col El Encino, CP 20240

Aguascalientes, Ags. Mexico

Tel (449) 9783038  Extension 231

Cel (449) 4962807

Skype for Business: jorge.arenas at csags.com.mx <mailto:jorge.arenas at csags.com.mx> 

Skype: jorgeaaq at outlook.com <mailto:jorgeaaq at outlook.com> 

 

 

 

From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: domingo, 6 de agosto de 2017 12:17 p. m.
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: RE: Recommended Platform

 

Any platform is fine as long as it is server grade. Things like Centos, Debian, Ubuntu LTS are fine. OS?s like Fedora are not good. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605

 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jorge A Arenas Quezada
Sent: Sunday, August 6, 2017 1:14 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Recommended Platform

 

Hi all

 

I know is difficult and everyone have an opinion maybe different but 

 

According to development, stability and management 

 

What would be the Linux platform ( or platforms ) recommended for run MailScanner

 

In this moment I have Centos with Sendmail for some time and is working 

 

Right now it is time to implement a new server and I am looking to validate if continue with the same platform or change to a  better combination of OS and MTA in terms of development or stability

 

I have no problem to learn and contribute with another platform 

 

Any comments would be appreciated 

 

 

Atte

Jorge A. Arenas Quezada

CSA Consultores

Av. Ayuntamiento 410A

Col El Encino, CP 20240

Aguascalientes, Ags. Mexico

Tel (449) 9783038  Extension 231

Cel (449) 4962807

Skype for Business: jorge.arenas at csags.com.mx <mailto:jorge.arenas at csags.com.mx> 

Skype: jorgeaaq at outlook.com <mailto:jorgeaaq at outlook.com> 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170806/459f3921/attachment.html>

From marek.gorny at bolix.pl  Mon Aug  7 06:44:55 2017
From: marek.gorny at bolix.pl (=?utf-8?B?TWFyZWsgR8Ozcm55?=)
Date: Mon, 7 Aug 2017 06:44:55 +0000
Subject: Recommended Platform
In-Reply-To: <008a01d30eea$393d2140$abb763c0$@mailborder.com>
References: <000c01d30ed7$731638b0$5942aa10$@gmail.com>
 <007301d30ed7$c9ec7230$5dc55690$@mailborder.com>
 <001f01d30ee9$a7b14da0$f713e8e0$@gmail.com>
 <008a01d30eea$393d2140$abb763c0$@mailborder.com>
Message-ID: <b0e57cc8ca0f41dab17438fc37522f48@BolixEx2.bolix.local>

Hi,
Currently, I'm using OpenSUSE 13.2 + MailScanner 4.85.2 + MTA Postfix as production server.
But now testing OpenSUSE Leap 42.3 + MailScanner 5.0.6-2 (build from source) also with Postix.
In both cases everything works fine, despite many changes between configurations (file systems, using RAMDISK, systemd)

Regards


Marek G?rny
IT Specialist

From: MailScanner [mailto:mailscanner-bounces+marek.gorny=bolix.pl at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Sunday, August 6, 2017 9:29 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Recommended Platform

In my opinion Postfix is the simplest to implement and manage.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jorge A Arenas Quezada
Sent: Sunday, August 6, 2017 3:25 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: Recommended Platform

Thank you Ben ? understood

About the MTA, I read some problems and some advantages with one or other

What would be your recommendation, if is a new implementation and maybe Centos 7?

Thanks in advance


Atte
Jorge A. Arenas Quezada
CSA Consultores
Av. Ayuntamiento 410A
Col El Encino, CP 20240
Aguascalientes, Ags. Mexico
Tel (449) 9783038  Extension 231
Cel (449) 4962807
Skype for Business: jorge.arenas at csags.com.mx<mailto:jorge.arenas at csags.com.mx>
Skype: jorgeaaq at outlook.com<mailto:jorgeaaq at outlook.com>



From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: domingo, 6 de agosto de 2017 12:17 p. m.
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: Recommended Platform

Any platform is fine as long as it is server grade. Things like Centos, Debian, Ubuntu LTS are fine. OS?s like Fedora are not good.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jorge A Arenas Quezada
Sent: Sunday, August 6, 2017 1:14 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Recommended Platform

Hi all

I know is difficult and everyone have an opinion maybe different but

According to development, stability and management

What would be the Linux platform ( or platforms ) recommended for run MailScanner

In this moment I have Centos with Sendmail for some time and is working

Right now it is time to implement a new server and I am looking to validate if continue with the same platform or change to a  better combination of OS and MTA in terms of development or stability

I have no problem to learn and contribute with another platform

Any comments would be appreciated


Atte
Jorge A. Arenas Quezada
CSA Consultores
Av. Ayuntamiento 410A
Col El Encino, CP 20240
Aguascalientes, Ags. Mexico
Tel (449) 9783038  Extension 231
Cel (449) 4962807
Skype for Business: jorge.arenas at csags.com.mx<mailto:jorge.arenas at csags.com.mx>
Skype: jorgeaaq at outlook.com<mailto:jorgeaaq at outlook.com>



[Bolix]

Bolix SA
Ul. Stolarska 8
34-300 ?ywiec, Poland
Bolix S.A. jest wiod?cym polskim producentem chemii budowlanej,
specjalizuj?cym si? w produkcji system?w elewacyjnych.
Marka BOLIX istnieje ju? od 1991 roku i jest synonimem najwy?szej jako?ci rozwi?za? budowlanych.

[Bolix_Teraz_Polska]<https://bolix.pl/pl/aktualnosci/bolix-laureatem-teraz-polska/75>

________________________________

Nr KRS: 0000230009  - S?d Rejonowy w Bielsku-Bia?ej,
VIII Wydzia? Gospodarczy Krajowego Rejestru S?dowego
Kapita? zak?adowy: 10 000 000 z?.; REGON: 015433210; NIP: 526-26-85-697

UWAGA: Niniejsza korespondencja przeznaczona jest wy??cznie dla osoby lub podmiotu, do kt?rego jest zaadresowana i mo?e zawiera? tre?ci chronione przepisami prawa. Wgl?d w tre?? wiadomo?ci otrzymanej omy?kowo, dalsze jej przekazywanie, rozpowszechnianie lub innego rodzaju wykorzystanie, b?d? podj?cie jakichkolwiek dzia?a? w oparciu o zawarte w niej informacje przez osob? lub podmiot nie b?d?cy adresatem, jest niedozwolone. Odbiorca korespondencji, kt?ry otrzyma? j? omy?kowo, proszony jest o zawiadomienie nadawcy i usuni?cie tego materia?u z komputera.

ATTENTION:  The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, Or taking of any action in reliance upon, this information by person or entity other than the intended recipient is not permitted. If you received this in error, please contact the sender and delete the material from any computer.

[Las] Prosz? pomy?l o ?rodowisku przed wydrukowaniem tego maila. Please Consider the Environment before printing this Email
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170807/b544e4c5/attachment.html>

From jvoorhees1 at gmail.com  Tue Aug  8 18:30:05 2017
From: jvoorhees1 at gmail.com (Jason Voorhees)
Date: Tue, 8 Aug 2017 13:30:05 -0500
Subject: Denial Of Service attack
In-Reply-To: <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
References: <CAFYpwJV60GDgyLVdqaWf+0yxaDSfg1UY0-fea1r7hM2nr+cRaA@mail.gmail.com>
 <CAFApQjYnUk5OHe9-E-ZtQA3WsBuDyYtwGCY234qmYABBDkcoDA@mail.gmail.com>
 <CAFYpwJWHzDw9-wcrNAGRtu55DkP4oQ_um36Ab5eyCpDc30dgGA@mail.gmail.com>
 <CAFApQjYDF_v-kOGNTKBbopJ2v1F4XLR0KSdtDsgXdOBbMUK1PA@mail.gmail.com>
 <CAFYpwJWwiJ8OtHSqbRM3p3QysnzknOPG0_sSg0eNxQQD1ZH_-Q@mail.gmail.com>
 <CAFApQjaOV-orkRR-L-Q3pHrtrw4Md-jU8mbnCOqTJF4PULR9dA@mail.gmail.com>
 <CAFYpwJW1Xa6akGY95qNywUBU5V+LnY0eYgwp1DapOWpa32fmTA@mail.gmail.com>
 <CAFApQjYaZprEc-AbMC6yr-MNATYzmXii7L1CrhetioZ9vf4TrA@mail.gmail.com>
 <CAFYpwJXQcvOq9Bu38Hbjz-MLEdWfTAw8A1yMQ4-Zqyoc+oNt6A@mail.gmail.com>
 <c4b8d5bc-92b8-f893-24ed-89cfed8703bd@msapiro.net>
 <CAFYpwJU+iL4v_L5D=KMDypnRB4CAgCHpF=qrtdJH6mxw4KP5Fw@mail.gmail.com>
 <3c5edc49-0b25-dda7-e7e4-6d7329716c1c@msapiro.net>
 <CAAug_B8aXY-EObnecCk7R+Q23M_eGQqP_a0Bq9Eorkh-rCZ3zw@mail.gmail.com>
 <CAAug_B8JX7jwTUmgMBEOZVRE+v9FBvRURd-vrd6wYJ8cJH07CA@mail.gmail.com>
 <CAAug_B9+4FVsiJfh9c_S0_6cZJi3Mea0H7K2KYSt4SxObcOccQ@mail.gmail.com>
 <CAAug_B_y8eLJQ=5vM1XYjLqsFjqqESDh_BF8uMXmYDCF8Y9NTg@mail.gmail.com>
 <CAFYpwJWbz-V6H+o5FbpNytDv+Rmqk5ejBvpZc03shGpu4z+VEw@mail.gmail.com>
 <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
Message-ID: <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>

Hey guys, sorry if I try to reopen this old thread. It's just that I
don't know what else to do. This problem started ocurring a couple of
months ago under the same settings I always do for every MailScanner
installation.

This is my scenario:

OS: CentOS 7 x86_64

SELinux: Disabled

MailScanner: 5.0.3

MailServer: Zimbra 8.7.11

MailScanner settings:
- Run As User: postfix
- Run As Group: postfix
- Incoming Work Group = postfix
- Incoming Work Permissions = 0660

ClamAV settings:
- LocalSocketGroup postfix
- User postfix
- AllowSupplementaryGroups yes

User and group settings:

$ id postfix
uid=89(postfix) gid=89(postfix)
groups=89(postfix),12(mail),994(clamupdate),48(apache),993(clamscan),1000(mtagroup)

Directory permissions:

$ ls -ld /var/spool/MailScanner
drwxr-xr-x 5 root root 75 Jul 27 11:53 /var/spool/MailScanner/

$ ls -ld /var/run/clamd.scan/
drwx--x--- 2 postfix postfix 80 Aug  8 13:09 /var/run/clamd.scan/

$ ls -l /var/spool/MailScanner/
total 0
drwxrwxr-x  2 postfix postfix   6 Aug 14  2016 archive
drwxrwx--- 17 postfix postfix 380 Aug  8 13:23 incoming
lrwxrwxrwx  1 root    root     28 Jul 27 11:53 quarantine ->
/opt/MailScanner/quarantine/
drwxrwxr-x  4 postfix postfix  82 Jul 15 11:01 spamassassin

$ ls -l /var/run/clamd.scan/
total 4
-rw-rw-r-- 1 postfix postfix 6 Aug  8 13:09 clamd.pid
srw-rw-rw- 1 postfix postfix 0 Aug  8 13:09 clamd.sock

I've made a recursive chown + chmod command like this:

# chown -R postfix:postfix /var/spool/MailScanner/incoming
# chmod -R g+rw /var/spool/MailScanner/incoming
# chmod -R g+X /var/spool/MailScanner/incoming

This is how my processes are running with their effective UIDs and GIDs:

$ ps -eo user,group,comm | grep -iE "(mailscanner|clam|postfix|user)"
USER     GROUP    COMMAND
root     root     freshclam-sleep
postfix  postfix  smtpd
postfix  postfix  smtpd
postfix  postfix  pickup
postfix  postfix  smtpd
postfix  postfix  smtpd
postfix  postfix  postscreen
postfix  postfix  showq
postfix  postfix  smtpd
postfix  postfix  clamd
postfix  postfix  cleanup
postfix  postfix  lmtp
postfix  postfix  trivial-rewrite
postfix  postfix  MailScanner: ma
postfix  postfix  MailScanner: wa
postfix  postfix  MailScanner: wa
postfix  postfix  MailScanner: wa
postfix  postfix  MailScanner: wa
postfix  postfix  MailScanner: wa
postfix  postfix  MailWatch SQL
postfix  postfix  proxymap
postfix  postfix  qmgr
postfix  postfix  tlsmgr
postfix  postfix  anvil

As you can see, everything (MailScanner, postfix and ClamD) is running
as postfix user and postfix group.

What might be wrong?

How can I modify/patch some MailScanner code to show some debug lines
when this problem occurs? I even think this is not a SELinux,
ownership nor permissions problem... :(

I hope someone can help me.

On Wed, Jan 25, 2017 at 10:41 AM, Glenn Steen <glenn.steen at gmail.com> wrote:
> You might have a problem with MailWatch as well, but I'd be interrested to
> hear what your findings about the permission bits are.
> Also, check that you only have queue files in the postfix hold... If  for
> example SpamAssassin puts files/directories in there, bad things will
> happen:).
>
> Looking at the MailWatch thing, have you verified that
> - Your database is up and running
> - You can connect to it with the credentials used in MailWatch.pm
> - You have no typos in MailWatch.pm file (specifically the my($db,,,)
> settings? Note that these need be in single quoteslike so:
> my($db_name) = 'mailscanner';
> my($db_host) = 'localhost';
> my($db_user) = 'mailwatch';
> my($db_pass) = 'secretpassword';
>
> Cheers!
> --
> -- Glenn
>
> 2017-01-25 13:27 GMT+01:00 Marcelo Machado <mmgomess at gmail.com>:
>>
>> Hi everyone.
>>
>> I have not said that I use MailWatch and it seems that the problem is
>> related to it.
>>
>> See this. https://github.com/mailwatch/1.2.0/issues/430
>>
>> 2017-01-24 8:51 GMT-02:00 Glenn Steen <glenn.steen at gmail.com>:
>> > Marcelo,
>> >
>> > Could you please check the following:
>> >
>> > ps -ef |egrep "postfix|clamd"
>> >
>> > depending on the result, check the user running postfix and clamd with
>> > something like:
>> > id postfix
>> > id clamav
>> > change the users as needed/found in the ps listing.
>> >
>> > This will show what your MailScanner.conf settings need be for both
>> > clamd
>> > and postfix to be able to access the incoming work directory. The theory
>> > is
>> > quite simple, just set the user to the one needed by the postfix
>> > processes,
>> > and the group to match the clamd one.
>> > Now, stop Mailscanner the ususal way, and use chown to change the actual
>> > ownership on the actual files&directories. Something like
>> > chown -R postfix.clamscan /var/spool/MailScanner/incoming
>> > (adjust as neede, of course)
>> > Start Mailscanner the usual way, and try sending a messege through...
>> > Other
>> > things to check:
>> > The permissions on the SpamAssassin directory (either you use the
>> > ~postfix/.spamassassin, or /var/spool/MailScanner/spamassassin ... or
>> > both... it all depends...:))
>> > Permissions on the quarantine directory
>> > Permissions on the configuration files (remember that MailScanner has to
>> > run
>> > as the postfix user, so all tests, like debugging and linting need be
>> > done
>> > as that user! "su - postfix -s /bin/bash" is your friend... You might
>> > need
>> > do a "sudo -i " first;-)).
>> >
>> > Cheers!
>> > --
>> > -- Glenn
>> >
>> >
>> >
>> > 2017-01-23 10:43 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:
>> >>
>> >> Actually, unless the OP has done something to the user/group setup,
>> >> this
>> >> is simply a case of malconfihuration...:-)
>> >>
>> >> Looking at my 16.04 install, postfix runs as user postfix with group
>> >> postfix, and I wouldn't even hazard a guess at whst clamd is running
>> >> as...
>> >> These things should be checked, and the MS config made to comply (use
>> >> ps to
>> >> learn more:), and fix any errors with chown (with MS/postfix shut
>> >> down)...
>> >> After that, things should start working;-)
>> >>
>> >> Cheers
>> >> --
>> >> -- Glenn
>> >>
>> >> Den 22 jan. 2017 7:40 em skrev "Mark Sapiro" <mark at msapiro.net>:
>> >>
>> >> On 01/22/2017 10:32 AM, Marcelo Machado wrote:
>> >> >
>> >> > I work with some Ubuntu servers with MailScanner installed and I
>> >> > noticed right now that this error does not occur in version 14.04,
>> >> > but
>> >> > only in version 16.04.
>> >>
>> >>
>> >> Which makes it likely that the issue is with apparmor.
>> >>
>> >> --
>> >> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
>> >> San Francisco Bay Area, California    better use your sense - B. Dylan
>> >>
>> >>
>> >> --
>> >> MailScanner mailing list
>> >> mailscanner at lists.mailscanner.info
>> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >>
>> >>
>> >
>> >
>> >
>> > --
>> > -- Glenn
>> > email: glenn < dot > steen < at > gmail < dot > com
>> > work: glenn < dot > steen < at > ap1 < dot > se
>> >
>> >
>> >
>> > --
>> > MailScanner mailing list
>> > mailscanner at lists.mailscanner.info
>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >
>> >
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>
>
>
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

From jvoorhees1 at gmail.com  Tue Aug  8 19:08:20 2017
From: jvoorhees1 at gmail.com (Jason Voorhees)
Date: Tue, 8 Aug 2017 14:08:20 -0500
Subject: Denial Of Service attack
In-Reply-To: <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
References: <CAFYpwJV60GDgyLVdqaWf+0yxaDSfg1UY0-fea1r7hM2nr+cRaA@mail.gmail.com>
 <CAFApQjYnUk5OHe9-E-ZtQA3WsBuDyYtwGCY234qmYABBDkcoDA@mail.gmail.com>
 <CAFYpwJWHzDw9-wcrNAGRtu55DkP4oQ_um36Ab5eyCpDc30dgGA@mail.gmail.com>
 <CAFApQjYDF_v-kOGNTKBbopJ2v1F4XLR0KSdtDsgXdOBbMUK1PA@mail.gmail.com>
 <CAFYpwJWwiJ8OtHSqbRM3p3QysnzknOPG0_sSg0eNxQQD1ZH_-Q@mail.gmail.com>
 <CAFApQjaOV-orkRR-L-Q3pHrtrw4Md-jU8mbnCOqTJF4PULR9dA@mail.gmail.com>
 <CAFYpwJW1Xa6akGY95qNywUBU5V+LnY0eYgwp1DapOWpa32fmTA@mail.gmail.com>
 <CAFApQjYaZprEc-AbMC6yr-MNATYzmXii7L1CrhetioZ9vf4TrA@mail.gmail.com>
 <CAFYpwJXQcvOq9Bu38Hbjz-MLEdWfTAw8A1yMQ4-Zqyoc+oNt6A@mail.gmail.com>
 <c4b8d5bc-92b8-f893-24ed-89cfed8703bd@msapiro.net>
 <CAFYpwJU+iL4v_L5D=KMDypnRB4CAgCHpF=qrtdJH6mxw4KP5Fw@mail.gmail.com>
 <3c5edc49-0b25-dda7-e7e4-6d7329716c1c@msapiro.net>
 <CAAug_B8aXY-EObnecCk7R+Q23M_eGQqP_a0Bq9Eorkh-rCZ3zw@mail.gmail.com>
 <CAAug_B8JX7jwTUmgMBEOZVRE+v9FBvRURd-vrd6wYJ8cJH07CA@mail.gmail.com>
 <CAAug_B9+4FVsiJfh9c_S0_6cZJi3Mea0H7K2KYSt4SxObcOccQ@mail.gmail.com>
 <CAAug_B_y8eLJQ=5vM1XYjLqsFjqqESDh_BF8uMXmYDCF8Y9NTg@mail.gmail.com>
 <CAFYpwJWbz-V6H+o5FbpNytDv+Rmqk5ejBvpZc03shGpu4z+VEw@mail.gmail.com>
 <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
 <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
Message-ID: <CABLXSUqed788ytKFO9QdOUO+Dbnmjq_uC0D8FQ6BGkA0a_hGvQ@mail.gmail.com>

At least, how can I completely disable HTML disarming at all? I've
tried these settings in the past without luck:

Allow IFrame Tags = yes
Allow Form Tags = yes
Allow Script Tags = yes
Allow Object Codebase Tags = yes



On Tue, Aug 8, 2017 at 1:30 PM, Jason Voorhees <jvoorhees1 at gmail.com> wrote:
> Hey guys, sorry if I try to reopen this old thread. It's just that I
> don't know what else to do. This problem started ocurring a couple of
> months ago under the same settings I always do for every MailScanner
> installation.
>
> This is my scenario:
>
> OS: CentOS 7 x86_64
>
> SELinux: Disabled
>
> MailScanner: 5.0.3
>
> MailServer: Zimbra 8.7.11
>
> MailScanner settings:
> - Run As User: postfix
> - Run As Group: postfix
> - Incoming Work Group = postfix
> - Incoming Work Permissions = 0660
>
> ClamAV settings:
> - LocalSocketGroup postfix
> - User postfix
> - AllowSupplementaryGroups yes
>
> User and group settings:
>
> $ id postfix
> uid=89(postfix) gid=89(postfix)
> groups=89(postfix),12(mail),994(clamupdate),48(apache),993(clamscan),1000(mtagroup)
>
> Directory permissions:
>
> $ ls -ld /var/spool/MailScanner
> drwxr-xr-x 5 root root 75 Jul 27 11:53 /var/spool/MailScanner/
>
> $ ls -ld /var/run/clamd.scan/
> drwx--x--- 2 postfix postfix 80 Aug  8 13:09 /var/run/clamd.scan/
>
> $ ls -l /var/spool/MailScanner/
> total 0
> drwxrwxr-x  2 postfix postfix   6 Aug 14  2016 archive
> drwxrwx--- 17 postfix postfix 380 Aug  8 13:23 incoming
> lrwxrwxrwx  1 root    root     28 Jul 27 11:53 quarantine ->
> /opt/MailScanner/quarantine/
> drwxrwxr-x  4 postfix postfix  82 Jul 15 11:01 spamassassin
>
> $ ls -l /var/run/clamd.scan/
> total 4
> -rw-rw-r-- 1 postfix postfix 6 Aug  8 13:09 clamd.pid
> srw-rw-rw- 1 postfix postfix 0 Aug  8 13:09 clamd.sock
>
> I've made a recursive chown + chmod command like this:
>
> # chown -R postfix:postfix /var/spool/MailScanner/incoming
> # chmod -R g+rw /var/spool/MailScanner/incoming
> # chmod -R g+X /var/spool/MailScanner/incoming
>
> This is how my processes are running with their effective UIDs and GIDs:
>
> $ ps -eo user,group,comm | grep -iE "(mailscanner|clam|postfix|user)"
> USER     GROUP    COMMAND
> root     root     freshclam-sleep
> postfix  postfix  smtpd
> postfix  postfix  smtpd
> postfix  postfix  pickup
> postfix  postfix  smtpd
> postfix  postfix  smtpd
> postfix  postfix  postscreen
> postfix  postfix  showq
> postfix  postfix  smtpd
> postfix  postfix  clamd
> postfix  postfix  cleanup
> postfix  postfix  lmtp
> postfix  postfix  trivial-rewrite
> postfix  postfix  MailScanner: ma
> postfix  postfix  MailScanner: wa
> postfix  postfix  MailScanner: wa
> postfix  postfix  MailScanner: wa
> postfix  postfix  MailScanner: wa
> postfix  postfix  MailScanner: wa
> postfix  postfix  MailWatch SQL
> postfix  postfix  proxymap
> postfix  postfix  qmgr
> postfix  postfix  tlsmgr
> postfix  postfix  anvil
>
> As you can see, everything (MailScanner, postfix and ClamD) is running
> as postfix user and postfix group.
>
> What might be wrong?
>
> How can I modify/patch some MailScanner code to show some debug lines
> when this problem occurs? I even think this is not a SELinux,
> ownership nor permissions problem... :(
>
> I hope someone can help me.
>
> On Wed, Jan 25, 2017 at 10:41 AM, Glenn Steen <glenn.steen at gmail.com> wrote:
>> You might have a problem with MailWatch as well, but I'd be interrested to
>> hear what your findings about the permission bits are.
>> Also, check that you only have queue files in the postfix hold... If  for
>> example SpamAssassin puts files/directories in there, bad things will
>> happen:).
>>
>> Looking at the MailWatch thing, have you verified that
>> - Your database is up and running
>> - You can connect to it with the credentials used in MailWatch.pm
>> - You have no typos in MailWatch.pm file (specifically the my($db,,,)
>> settings? Note that these need be in single quoteslike so:
>> my($db_name) = 'mailscanner';
>> my($db_host) = 'localhost';
>> my($db_user) = 'mailwatch';
>> my($db_pass) = 'secretpassword';
>>
>> Cheers!
>> --
>> -- Glenn
>>
>> 2017-01-25 13:27 GMT+01:00 Marcelo Machado <mmgomess at gmail.com>:
>>>
>>> Hi everyone.
>>>
>>> I have not said that I use MailWatch and it seems that the problem is
>>> related to it.
>>>
>>> See this. https://github.com/mailwatch/1.2.0/issues/430
>>>
>>> 2017-01-24 8:51 GMT-02:00 Glenn Steen <glenn.steen at gmail.com>:
>>> > Marcelo,
>>> >
>>> > Could you please check the following:
>>> >
>>> > ps -ef |egrep "postfix|clamd"
>>> >
>>> > depending on the result, check the user running postfix and clamd with
>>> > something like:
>>> > id postfix
>>> > id clamav
>>> > change the users as needed/found in the ps listing.
>>> >
>>> > This will show what your MailScanner.conf settings need be for both
>>> > clamd
>>> > and postfix to be able to access the incoming work directory. The theory
>>> > is
>>> > quite simple, just set the user to the one needed by the postfix
>>> > processes,
>>> > and the group to match the clamd one.
>>> > Now, stop Mailscanner the ususal way, and use chown to change the actual
>>> > ownership on the actual files&directories. Something like
>>> > chown -R postfix.clamscan /var/spool/MailScanner/incoming
>>> > (adjust as neede, of course)
>>> > Start Mailscanner the usual way, and try sending a messege through...
>>> > Other
>>> > things to check:
>>> > The permissions on the SpamAssassin directory (either you use the
>>> > ~postfix/.spamassassin, or /var/spool/MailScanner/spamassassin ... or
>>> > both... it all depends...:))
>>> > Permissions on the quarantine directory
>>> > Permissions on the configuration files (remember that MailScanner has to
>>> > run
>>> > as the postfix user, so all tests, like debugging and linting need be
>>> > done
>>> > as that user! "su - postfix -s /bin/bash" is your friend... You might
>>> > need
>>> > do a "sudo -i " first;-)).
>>> >
>>> > Cheers!
>>> > --
>>> > -- Glenn
>>> >
>>> >
>>> >
>>> > 2017-01-23 10:43 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:
>>> >>
>>> >> Actually, unless the OP has done something to the user/group setup,
>>> >> this
>>> >> is simply a case of malconfihuration...:-)
>>> >>
>>> >> Looking at my 16.04 install, postfix runs as user postfix with group
>>> >> postfix, and I wouldn't even hazard a guess at whst clamd is running
>>> >> as...
>>> >> These things should be checked, and the MS config made to comply (use
>>> >> ps to
>>> >> learn more:), and fix any errors with chown (with MS/postfix shut
>>> >> down)...
>>> >> After that, things should start working;-)
>>> >>
>>> >> Cheers
>>> >> --
>>> >> -- Glenn
>>> >>
>>> >> Den 22 jan. 2017 7:40 em skrev "Mark Sapiro" <mark at msapiro.net>:
>>> >>
>>> >> On 01/22/2017 10:32 AM, Marcelo Machado wrote:
>>> >> >
>>> >> > I work with some Ubuntu servers with MailScanner installed and I
>>> >> > noticed right now that this error does not occur in version 14.04,
>>> >> > but
>>> >> > only in version 16.04.
>>> >>
>>> >>
>>> >> Which makes it likely that the issue is with apparmor.
>>> >>
>>> >> --
>>> >> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
>>> >> San Francisco Bay Area, California    better use your sense - B. Dylan
>>> >>
>>> >>
>>> >> --
>>> >> MailScanner mailing list
>>> >> mailscanner at lists.mailscanner.info
>>> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>> >>
>>> >>
>>> >
>>> >
>>> >
>>> > --
>>> > -- Glenn
>>> > email: glenn < dot > steen < at > gmail < dot > com
>>> > work: glenn < dot > steen < at > ap1 < dot > se
>>> >
>>> >
>>> >
>>> > --
>>> > MailScanner mailing list
>>> > mailscanner at lists.mailscanner.info
>>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>> >
>>> >
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>
>>
>>
>> --
>> -- Glenn
>> email: glenn < dot > steen < at > gmail < dot > com
>> work: glenn < dot > steen < at > ap1 < dot > se
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>

From mark at msapiro.net  Tue Aug  8 19:18:55 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 8 Aug 2017 12:18:55 -0700
Subject: Denial Of Service attack
In-Reply-To: <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
References: <CAFYpwJV60GDgyLVdqaWf+0yxaDSfg1UY0-fea1r7hM2nr+cRaA@mail.gmail.com>
 <CAFYpwJW1Xa6akGY95qNywUBU5V+LnY0eYgwp1DapOWpa32fmTA@mail.gmail.com>
 <CAFApQjYaZprEc-AbMC6yr-MNATYzmXii7L1CrhetioZ9vf4TrA@mail.gmail.com>
 <CAFYpwJXQcvOq9Bu38Hbjz-MLEdWfTAw8A1yMQ4-Zqyoc+oNt6A@mail.gmail.com>
 <c4b8d5bc-92b8-f893-24ed-89cfed8703bd@msapiro.net>
 <CAFYpwJU+iL4v_L5D=KMDypnRB4CAgCHpF=qrtdJH6mxw4KP5Fw@mail.gmail.com>
 <3c5edc49-0b25-dda7-e7e4-6d7329716c1c@msapiro.net>
 <CAAug_B8aXY-EObnecCk7R+Q23M_eGQqP_a0Bq9Eorkh-rCZ3zw@mail.gmail.com>
 <CAAug_B8JX7jwTUmgMBEOZVRE+v9FBvRURd-vrd6wYJ8cJH07CA@mail.gmail.com>
 <CAAug_B9+4FVsiJfh9c_S0_6cZJi3Mea0H7K2KYSt4SxObcOccQ@mail.gmail.com>
 <CAAug_B_y8eLJQ=5vM1XYjLqsFjqqESDh_BF8uMXmYDCF8Y9NTg@mail.gmail.com>
 <CAFYpwJWbz-V6H+o5FbpNytDv+Rmqk5ejBvpZc03shGpu4z+VEw@mail.gmail.com>
 <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
 <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
Message-ID: <60c65555-3b3f-a313-a7aa-6343ee7bb6f3@msapiro.net>

On 08/08/2017 11:30 AM, Jason Voorhees wrote:
> 
> $ ls -ld /var/spool/MailScanner
> drwxr-xr-x 5 root root 75 Jul 27 11:53 /var/spool/MailScanner/


Have you tried

chown postfix:postfix /var/spool/MailScanner


> $ ls -ld /var/run/clamd.scan/
> drwx--x--- 2 postfix postfix 80 Aug  8 13:09 /var/run/clamd.scan/
> 
> $ ls -l /var/spool/MailScanner/
> total 0
> drwxrwxr-x  2 postfix postfix   6 Aug 14  2016 archive
> drwxrwx--- 17 postfix postfix 380 Aug  8 13:23 incoming
> lrwxrwxrwx  1 root    root     28 Jul 27 11:53 quarantine ->
> /opt/MailScanner/quarantine/
> drwxrwxr-x  4 postfix postfix  82 Jul 15 11:01 spamassassin


What is the ownership and permissions on /opt/MailScanner/quarantine/ ?


> How can I modify/patch some MailScanner code to show some debug lines
> when this problem occurs? I even think this is not a SELinux,
> ownership nor permissions problem... :(


What exactly are you seeing? Are you seeing the message

> MailScanner was attacked by a Denial Of Service attack, and has therefore
> deleted this part of the message. Please contact your e-mail providers
> for more information if you need it, giving them the whole of this report.

in delivered emails. If so, there should be a message from MailScanner

> HTML disarming died, status = sss

in the system mail.log giving the reason why the forked disarming
process died. (These messages come from
/usr/share/MailScanner/perl/MailScanner/Message.pm around lines 7029-7037.

If you are seeing "Virus Scanning: Denial Of Service attack ..." log
messages, look at
/usr/share/MailScanner/perl/MailScanner/SweepViruses.pm around lines
480-520. These messages indicate clamd timed out.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From jvoorhees1 at gmail.com  Tue Aug  8 19:48:37 2017
From: jvoorhees1 at gmail.com (Jason Voorhees)
Date: Tue, 8 Aug 2017 14:48:37 -0500
Subject: Denial Of Service attack
In-Reply-To: <60c65555-3b3f-a313-a7aa-6343ee7bb6f3@msapiro.net>
References: <CAFYpwJV60GDgyLVdqaWf+0yxaDSfg1UY0-fea1r7hM2nr+cRaA@mail.gmail.com>
 <CAFYpwJW1Xa6akGY95qNywUBU5V+LnY0eYgwp1DapOWpa32fmTA@mail.gmail.com>
 <CAFApQjYaZprEc-AbMC6yr-MNATYzmXii7L1CrhetioZ9vf4TrA@mail.gmail.com>
 <CAFYpwJXQcvOq9Bu38Hbjz-MLEdWfTAw8A1yMQ4-Zqyoc+oNt6A@mail.gmail.com>
 <c4b8d5bc-92b8-f893-24ed-89cfed8703bd@msapiro.net>
 <CAFYpwJU+iL4v_L5D=KMDypnRB4CAgCHpF=qrtdJH6mxw4KP5Fw@mail.gmail.com>
 <3c5edc49-0b25-dda7-e7e4-6d7329716c1c@msapiro.net>
 <CAAug_B8aXY-EObnecCk7R+Q23M_eGQqP_a0Bq9Eorkh-rCZ3zw@mail.gmail.com>
 <CAAug_B8JX7jwTUmgMBEOZVRE+v9FBvRURd-vrd6wYJ8cJH07CA@mail.gmail.com>
 <CAAug_B9+4FVsiJfh9c_S0_6cZJi3Mea0H7K2KYSt4SxObcOccQ@mail.gmail.com>
 <CAAug_B_y8eLJQ=5vM1XYjLqsFjqqESDh_BF8uMXmYDCF8Y9NTg@mail.gmail.com>
 <CAFYpwJWbz-V6H+o5FbpNytDv+Rmqk5ejBvpZc03shGpu4z+VEw@mail.gmail.com>
 <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
 <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
 <60c65555-3b3f-a313-a7aa-6343ee7bb6f3@msapiro.net>
Message-ID: <CABLXSUp9g2zj0SiFJvcwDknp0uOr18GJ87Gn3xORK53SYZXwUw@mail.gmail.com>

Thanks for your response Mark. My reply is shown lines below...

> Have you tried
>
> chown postfix:postfix /var/spool/MailScanner
>
No, but can try it now, I'll let you know if this helps.

Does MailScanner need to write or create any file/directory directly
under /var/spool/MailScanner ?

>
> What is the ownership and permissions on /opt/MailScanner/quarantine/ ?
>
>
$ ls -ld /opt/MailScanner/quarantine/
drwxrwxr-x 9 postfix apache 4096 Aug  8 03:16 /opt/MailScanner/quarantine/

$ ls -ld /opt/MailScanner/
drwxr-xr-x 3 root root 4096 Jul 27 11:53 /opt/MailScanner/

By the way... I have a rule to keep a copy of every message (clean,
virus and spam) in quarantine. Does quarantine directory permissions
matter in this DoS attack problem?

>> How can I modify/patch some MailScanner code to show some debug lines
>> when this problem occurs? I even think this is not a SELinux,
>> ownership nor permissions problem... :(
>
>
> What exactly are you seeing? Are you seeing the message
I can't have a copy of the original message that caused the "DoS"
attack because is not being quarantined.

>
>> MailScanner was attacked by a Denial Of Service attack, and has therefore
>> deleted this part of the message. Please contact your e-mail providers
>> for more information if you need it, giving them the whole of this report.
>
> in delivered emails. If so, there should be a message from MailScanner
>
>> HTML disarming died, status = sss
Its code is 13. Log file looks like:

Aug  8 14:24:30 mail MailScanner[34683]: HTML disarming died, status = 13


>
> in the system mail.log giving the reason why the forked disarming
> process died. (These messages come from
> /usr/share/MailScanner/perl/MailScanner/Message.pm around lines 7029-7037.
>
> If you are seeing "Virus Scanning: Denial Of Service attack ..." log
> messages, look at
> /usr/share/MailScanner/perl/MailScanner/SweepViruses.pm around lines
> 480-520. These messages indicate clamd timed out.
>
Ok, $PipeReturn seems to be 13 as shown in log before. However by
reading (and trying to understand perl code) is not clear to me what
causes MailScanner to fail at the HTML disarming phase. I see some
lines that say something about a command (SpamAssassin?) time out, but
I can't understand it very well.

So far I've set "Dangerous Content Scanning = no" to temporarily
"solve" this problem until I have something new to test.

From mark at msapiro.net  Tue Aug  8 22:49:06 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 8 Aug 2017 15:49:06 -0700
Subject: Denial Of Service attack
In-Reply-To: <CABLXSUp9g2zj0SiFJvcwDknp0uOr18GJ87Gn3xORK53SYZXwUw@mail.gmail.com>
References: <CAFYpwJV60GDgyLVdqaWf+0yxaDSfg1UY0-fea1r7hM2nr+cRaA@mail.gmail.com>
 <CAFApQjYaZprEc-AbMC6yr-MNATYzmXii7L1CrhetioZ9vf4TrA@mail.gmail.com>
 <CAFYpwJXQcvOq9Bu38Hbjz-MLEdWfTAw8A1yMQ4-Zqyoc+oNt6A@mail.gmail.com>
 <c4b8d5bc-92b8-f893-24ed-89cfed8703bd@msapiro.net>
 <CAFYpwJU+iL4v_L5D=KMDypnRB4CAgCHpF=qrtdJH6mxw4KP5Fw@mail.gmail.com>
 <3c5edc49-0b25-dda7-e7e4-6d7329716c1c@msapiro.net>
 <CAAug_B8aXY-EObnecCk7R+Q23M_eGQqP_a0Bq9Eorkh-rCZ3zw@mail.gmail.com>
 <CAAug_B8JX7jwTUmgMBEOZVRE+v9FBvRURd-vrd6wYJ8cJH07CA@mail.gmail.com>
 <CAAug_B9+4FVsiJfh9c_S0_6cZJi3Mea0H7K2KYSt4SxObcOccQ@mail.gmail.com>
 <CAAug_B_y8eLJQ=5vM1XYjLqsFjqqESDh_BF8uMXmYDCF8Y9NTg@mail.gmail.com>
 <CAFYpwJWbz-V6H+o5FbpNytDv+Rmqk5ejBvpZc03shGpu4z+VEw@mail.gmail.com>
 <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
 <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
 <60c65555-3b3f-a313-a7aa-6343ee7bb6f3@msapiro.net>
 <CABLXSUp9g2zj0SiFJvcwDknp0uOr18GJ87Gn3xORK53SYZXwUw@mail.gmail.com>
Message-ID: <5c02ff60-f14b-b055-4f47-0234082a3e55@msapiro.net>

On 08/08/2017 12:48 PM, Jason Voorhees wrote:
>>
>> What is the ownership and permissions on /opt/MailScanner/quarantine/ ?
>>
>>
> $ ls -ld /opt/MailScanner/quarantine/
> drwxrwxr-x 9 postfix apache 4096 Aug  8 03:16 /opt/MailScanner/quarantine/


I'm not sure if the group apache is an issue. It shouldn't be, but the
whole thing is a mystery to me so who knows?

Is this set to apache because of MailWatch or something similar? If so,
maybe this is a MailWatch issue.


> $ ls -ld /opt/MailScanner/
> drwxr-xr-x 3 root root 4096 Jul 27 11:53 /opt/MailScanner/
> 
> By the way... I have a rule to keep a copy of every message (clean,
> virus and spam) in quarantine. Does quarantine directory permissions
> matter in this DoS attack problem?


Possibly?



> Its code is 13. Log file looks like:
> 
> Aug  8 14:24:30 mail MailScanner[34683]: HTML disarming died, status = 13
...
>>
> Ok, $PipeReturn seems to be 13 as shown in log before.


And that means that the child process that was forked by
MailScanner/Message.pm to actually do the disarming died for "no permission"

> However by
> reading (and trying to understand perl code) is not clear to me what
> causes MailScanner to fail at the HTML disarming phase. I see some
> lines that say something about a command (SpamAssassin?) time out, but
> I can't understand it very well.


That's not relevant here. What is going on here is the disarming of
phishing tags. The child is parsing the HTML and has various callbacks
to do things when HTML tags are encountered.

It is not at all clear to me what is going on here. If the child can't
create the file for the disarmed HTML, it should log "Could not create
disarmed HTML file NAME" and exit with status 1, and if for some reason
it can't open the original HTML, it should log "HTML disarming, can't
open file NAME: ERROR"

It seems the only other possibility seems to be the child dies trying to
pipe the results back to the parent.

All I can suggest is you try to add more logging in the child's code at
lines 6916 - 6961 in MailScanner/Message.pm to try to pinpoint where the
failure occurs, and also look at the callback functions
DisarmTextCallback, DisarmTagCallback and DisarmEndtagCallback.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From endelwar at aregar.it  Fri Aug 11 08:19:09 2017
From: endelwar at aregar.it (Manuel Dalla Lana)
Date: Fri, 11 Aug 2017 10:19:09 +0200
Subject: Denial Of Service attack
In-Reply-To: <5c02ff60-f14b-b055-4f47-0234082a3e55@msapiro.net>
References: <CAFYpwJV60GDgyLVdqaWf+0yxaDSfg1UY0-fea1r7hM2nr+cRaA@mail.gmail.com>
 <CAFYpwJXQcvOq9Bu38Hbjz-MLEdWfTAw8A1yMQ4-Zqyoc+oNt6A@mail.gmail.com>
 <c4b8d5bc-92b8-f893-24ed-89cfed8703bd@msapiro.net>
 <CAFYpwJU+iL4v_L5D=KMDypnRB4CAgCHpF=qrtdJH6mxw4KP5Fw@mail.gmail.com>
 <3c5edc49-0b25-dda7-e7e4-6d7329716c1c@msapiro.net>
 <CAAug_B8aXY-EObnecCk7R+Q23M_eGQqP_a0Bq9Eorkh-rCZ3zw@mail.gmail.com>
 <CAAug_B8JX7jwTUmgMBEOZVRE+v9FBvRURd-vrd6wYJ8cJH07CA@mail.gmail.com>
 <CAAug_B9+4FVsiJfh9c_S0_6cZJi3Mea0H7K2KYSt4SxObcOccQ@mail.gmail.com>
 <CAAug_B_y8eLJQ=5vM1XYjLqsFjqqESDh_BF8uMXmYDCF8Y9NTg@mail.gmail.com>
 <CAFYpwJWbz-V6H+o5FbpNytDv+Rmqk5ejBvpZc03shGpu4z+VEw@mail.gmail.com>
 <CAAug_B-rwYSLjKUwzo4sb4dC_A29+2ApRt7eCDOfQAuTRY_z4A@mail.gmail.com>
 <CABLXSUoumZxiEkzQLhAoOnsAJOo=ptV3LCO1RTRgxfKEyEcEQg@mail.gmail.com>
 <60c65555-3b3f-a313-a7aa-6343ee7bb6f3@msapiro.net>
 <CABLXSUp9g2zj0SiFJvcwDknp0uOr18GJ87Gn3xORK53SYZXwUw@mail.gmail.com>
 <5c02ff60-f14b-b055-4f47-0234082a3e55@msapiro.net>
Message-ID: <124eff55-d67d-7fad-a85b-99fe7f98e686@aregar.it>



Il 09/08/17 00:49, Mark Sapiro ha scritto:
> On 08/08/2017 12:48 PM, Jason Voorhees wrote:
>>> What is the ownership and permissions on /opt/MailScanner/quarantine/ ?
>>>
>>>
>> $ ls -ld /opt/MailScanner/quarantine/
>> drwxrwxr-x 9 postfix apache 4096 Aug  8 03:16 /opt/MailScanner/quarantine/
>
> I'm not sure if the group apache is an issue. It shouldn't be, but the
> whole thing is a mystery to me so who knows?
>
> Is this set to apache because of MailWatch or something similar? If so,
> maybe this is a MailWatch issue.
>

Shouldn't group permission be set to mtagroup in V5 (same for
postfix:mtagroup instead of postfix:postfix in/var/spool/MailScanner/,
and clamav and MailScanner config files)?

Add apache to mtagroup if MailWatch is included in your stack, and use mtagroup where asked for group name.

Manuel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170811/2e26eb07/attachment.html>

From pasik at iki.fi  Fri Aug 11 19:54:56 2017
From: pasik at iki.fi (Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?=)
Date: Fri, 11 Aug 2017 22:54:56 +0300
Subject: Upgrade to CentOS 7.0
In-Reply-To: <94ed2c38-68b5-f562-a009-66f4db288b08@farrows.org>
References: <CABu_8zKRC6hUfRkeGUABsJaBqDoUjjeNX+ri4BRq5GHDUfM8sw@mail.gmail.com>
 <1497564059.1992.0@smtp.gmail.com>
 <CABu_8zKj-qY5QULo1A+4QsZgmAP51UhfXTVOoVHL490x0udbVA@mail.gmail.com>
 <alpine.LRH.2.20.1707031050230.20609@raveon.vaag.nu>
 <SN1PR10MB059083DE6DF9DB4FA25C77CEB0AF0@SN1PR10MB0590.namprd10.prod.outlook.com>
 <001701d2fab9$ec0db220$c4291660$@mailborder.com>
 <CABu_8zL4RfM3oQw+RNNEXZvvtjiEnZc9udA01aHtHbywRK2ARg@mail.gmail.com>
 <CABu_8z+vP3n=H4LnYsQmwiq1gVv4P=pa3u8Qcv2zGnQnPm6MKw@mail.gmail.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F5910A28@HC-EXMBX04.herefordshire.gov.uk>
 <94ed2c38-68b5-f562-a009-66f4db288b08@farrows.org>
Message-ID: <20170811195456.GU4090@reaktio.net>

Hi,

On Wed, Jul 26, 2017 at 11:01:18AM +0100, Peter Farrow wrote:
> This is probably not the answer you're looking for, but we have been a Red
> Hat and later Centos house for over 20 years.
> 
> We started a mass migration to Ubuntu 1604 LTS earlier this year and have to
> say we would never go back to Centos or RedHat now.
> 
> It is completely backward and version limited compared to Ubuntu, and the
> Yum/RPM configuration is simply archaic compared to "apt".
> 
> The management of SystemD and backwards compatibility with system V scripts
> on Centos7/Redhat 7 is botched at best.
> 
> My only regret is that we didn't dump Redhat/centos earlier.
> 
> You also need to consider that RedHat bought out all the Centos core
> developers and its owned/funded by RedHat now so there is a commercial
> incentive to make it an inferior product now to entice people to move to
> RHEL.  There is also no upgrade path on Centos or RedHat between major
> version revisions so you have to re-install which is a massive "ball-ache"
> to say the least.
>

That's not correct. Redhat *does* support upgrades from rhel6 server to rhel7 server.

https://access.redhat.com/solutions/637583
https://access.redhat.com/solutions/21964


>  This is done because RedHat market and sell their support
> based on Major revisions and allowing an upgrade mechanism between say
> Centos 6 and Centos 7 would scupper that revenue stream.
> 

That's not correct either. Redhat sells rhel subscriptions, which allows you to run *any* version of rhel, and upgrade when you want. Subscriptions are not tied to specific rhel version.


> And the final point, RedHat just feels a bit basic, primitive and rubbish
> after using Ubuntu.
> 

Heh.

> So take the plunge, yo won't regret it!
> 

Nice trolling! :)


-- Pasi

> 
> On 26/07/2017 10:16, Randal, Phil wrote:
> >
> >Hi folks,
> >
> >I see that Shawn Iverson has published MailScanner 5.0.6-2 on GitHub.
> >
> >When can we expect to see updated install packages on www.mailscanner.info
> ><http://www.mailscanner.info>?
> >
> >Cheers,
> >
> >Phil
> >
> >*From:*MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info]*On
> >Behalf Of *Shawn Iverson
> >*Sent:* 14 July 2017 00:23
> >*To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> >*Subject:* Re: Upgrade to CentOS 7.0
> >
> >pushing this and other tasks to the weekend, will keep you posted...
> >
> >On Tue, Jul 11, 2017 at 11:00 PM, Shawn Iverson
> ><iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>>
> >wrote:
> >
> >    Jerry,
> >
> >    Sounds great, let me get to work on this.  ETA will probably be
> >    tomorrow, getting late here...
> >
> >    On Tue, Jul 11, 2017 at 10:52 PM, Jerry Benton
> >    <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com>>
> >    wrote:
> >
> >        I recently switched development environments and have yet to
> >        spin up the servers to build the DEB and RPM packages. If
> >        anyone has is already setup to build out some release packages
> >        (i.e. Shawn), I will happily post those for download on the
> >        MailScanner website. Just make sure you give me a chance to
> >        update build versions in GitHub. I would also need a changelog.
> >
> >
> >        --
> >        Jerry Benton
> >        www.mailborder.com <http://www.mailborder.com>
> >        +1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605>
> >        +44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605>
> >
> >
> >        -----Original Message-----
> >        From: MailScanner [mailto:mailscanner-bounces+jerry.benton
> >        <mailto:mailscanner-bounces%2Bjerry.benton>=mailborder.com at lists.mailscanner.info
> >        <mailto:mailborder.com at lists.mailscanner.info>] On Behalf Of
> >        Paul Scott
> >        Sent: Tuesday, July 11, 2017 9:14 PM
> >        To: MailScanner Discussion <mailscanner at lists.mailscanner.info
> >        <mailto:mailscanner at lists.mailscanner.info>>
> >        Subject: RE: Upgrade to CentOS 7.0
> >
> >        I am wondering the same thing.  Have my system up and running,
> >        but have not received word yet with the proper MailScanner
> >        version to install.
> >
> >        Sincerely,
> >
> >        Paul Scott, Engineer
> >        Eden USA, Incorporated
> >        Event Production Services Since 1995
> >        Los Angeles-Las Vegas-New York
> >        sales at edenusa.com <mailto:sales at edenusa.com> OR
> >        edenusasales at gmail.com <mailto:edenusasales at gmail.com>
> >        Telephone(s): 866.501.3336 <tel:866.501.3336> OR 951.505.6967
> >        <tel:951.505.6967>
> >        Fax: 866.502.3336 <tel:866.502.3336>
> >
> >        WEBSITE: https://www.edenusa.com
> >        FACEBOOK: http://www.facebook.com/edenusainc
> >
> >        -----Original Message-----
> >        From: MailScanner [mailto:mailscanner-bounces+sales
> >        <mailto:mailscanner-bounces%2Bsales>=edenusa.com at lists.mailscanner.info
> >        <mailto:edenusa.com at lists.mailscanner.info>] On Behalf Of
> >        Remco Barendse
> >        Sent: Monday, July 03, 2017 1:52 AM
> >        To: MailScanner Discussion <mailscanner at lists.mailscanner.info
> >        <mailto:mailscanner at lists.mailscanner.info>>
> >        Subject: Re: Upgrade to CentOS 7.0
> >
> >        Is the update available somewhere? I am on the same path of
> >        having to upgrade, while I am testing I might as well test the
> >        new systemd enhats (would be a pity to start off with Centos6
> >        now)  now) :)
> >
> >        Thanks!
> >
> >        On Thu, 15 Jun 2017, Shawn Iverson wrote:
> >
> >        > Jerry,
> >        > Yes.  There's a little bug in the SUSE installer, but it was
> >        already
> >        > present prior to the changes.  Just a missing perl module
> >        that should be installed when running install.sh.  I have an
> >        issue open for it.  With a little time I should be able to
> >        resolve it for you.
> >        >
> >        > Feel free to test further, or if desired, let me know and
> >        I'll run another round of testing.  I have run successful
> >        tests on CentOS, Fedora, Ubuntu, and SUSE.
> >        >
> >        > As near as I can tell, sendmail already runs in split mode
> >        on non-Redhat based systems.
> >        >
> >        > On Thu, Jun 15, 2017 at 6:00 PM, Jerry Benton
> >        <jerry.benton at mailborder.com
> >        <mailto:jerry.benton at mailborder.com>> wrote:
> >        >       This might be a crazy question ... Are you updates
> >        done for all
> >        > of the changes you were making? I have not tested them myself.
> >        >
> >        > -- Jerry Benton www.mailborder.com <http://www.mailborder.com>
> >        >
> >        >
> >        > On Thu, Jun 15, 2017 at 5:46 PM, Shawn Iverson
> >        <iversons at rushville.k12.in.us
> >        <mailto:iversons at rushville.k12.in.us>> wrote:
> >        >       Paul,
> >        > Wait for Mr. Benton to release the next update.  It will
> >        contain systemd enhancements for sendmail and mailscanner.
> >        >
> >        > On Thu, Jun 15, 2017 at 4:54 PM, Paul Scott
> >        <sales at edenusa.com <mailto:sales at edenusa.com>> wrote:
> >        >
> >        >       I am planning on upgrading our Sendmail server to
> >        CentOS 7.0, and am wondering if there any hints from you guys,
> >        on what to expect, or what difficulties I may run into, etc.
> >This will be a brand-new fresh
> >        >       install on all new hardware, then install MailScanner
> >        and migrate our mailboxes over.  Please let me know.  Thank
> >        you so much!
> >        >
> >        >
> >        >
> >        >       Sincerely,
> >        >
> >        >
> >        >
> >        >       Paul Scott, Engineer
> >        >
> >        >       Eden USA, Incorporated
> >        >       Event Production Services Since 1995
> >        >       Los Angeles-Las Vegas-New York
> >        > sales at edenusa.com <mailto:sales at edenusa.com> OR
> >        edenusasales at gmail.com <mailto:edenusasales at gmail.com>
> >        >       Telephone(s): 866.501.3336 <tel:866.501.3336> OR
> >        951.505.6967 <tel:951.505.6967>
> >        >       Fax: 866.502.3336 <tel:866.502.3336>
> >        >
> >        >
> >        >
> >        >       WEBSITE: https://www.edenusa.com
> >        >
> >        >       FACEBOOK: http://www.facebook.com/edenusainc
> >        >
> >        >
> >        >
> >        >
> >        >
> >        >
> >        > --
> >        > MailScanner mailing list
> >        > mailscanner at lists.mailscanner.info
> >        <mailto:mailscanner at lists.mailscanner.info>
> >        > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >        >
> >        >
> >        >
> >        >
> >        >
> >        > --
> >        > Shawn Iverson, CETLDirector of Technology Rush County Schools
> >        > 765-932-3901 x271 <tel:765-932-3901%20x271>
> >        > iversons at rushville.k12.in.us
> >        <mailto:iversons at rushville.k12.in.us>
> >        >
> >        >
> >        [uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs
> >        > _UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ]
> >        >
> >        [uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs
> >        > _QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
> >        >
> >        >
> >        >
> >        >
> >        > --
> >        > MailScanner mailing list
> >        > mailscanner at lists.mailscanner.info
> >        <mailto:mailscanner at lists.mailscanner.info>
> >        > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >        >
> >        >
> >        >
> >        >
> >        >
> >        > --
> >        > Shawn Iverson, CETLDirector of Technology Rush County Schools
> >        > 765-932-3901 x271 <tel:765-932-3901%20x271>
> >        > iversons at rushville.k12.in.us
> >        <mailto:iversons at rushville.k12.in.us>
> >        >
> >        >
> >        [uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs
> >        > _UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ]
> >        >
> >        [uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs
> >        > _QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
> >        >
> >        >
> >
> >
> >        --
> >        MailScanner mailing list
> >        mailscanner at lists.mailscanner.info
> >        <mailto:mailscanner at lists.mailscanner.info>
> >        http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> >
> >        --
> >        MailScanner mailing list
> >        mailscanner at lists.mailscanner.info
> >        <mailto:mailscanner at lists.mailscanner.info>
> >        http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> >    --
> >
> >    Shawn Iverson, CETL
> >
> >    Director of Technology
> >
> >    Rush County Schools
> >
> >    765-932-3901 x271 <tel:%28765%29%20932-3901>
> >
> >    iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >-- 
> >
> >Shawn Iverson, CETL
> >
> >Director of Technology
> >
> >Rush County Schools
> >
> >765-932-3901 x271
> >
> >iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >Hoople Ltd, Registered in England and Wales No. 7556595
> >Registered office: Plough Lane, Hereford, HR4 0LE
> >
> >"Any opinion expressed in this e-mail or any attached files are those of
> >the individual and not necessarily those of Hoople Ltd. You should be
> >aware that Hoople Ltd. monitors its email service. This e-mail and any
> >attached files are confidential and intended solely for the use of the
> >addressee. This communication may contain material protected by law from
> >being passed on. If you are not the intended recipient and have received
> >this e-mail in error, you are advised that any use, dissemination,
> >forwarding, printing or copying of this e-mail is strictly prohibited. If
> >you have received this e-mail in error please contact the sender
> >immediately and destroy all copies of it."
> >
> >
> >
> 
> -- 

> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 


From Eoin.Kim at rcst.com.au  Tue Aug 15 00:25:55 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 15 Aug 2017 00:25:55 +0000
Subject: Enquiry regarding a new version
Message-ID: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>

G'day Jerry,

It might sound like a stupid question but I'd like to know if you have any plans for a new stable version release soon as I am planning a test of newer MailScanner than my company's current one. Thanks.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 - The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231

[RCST logo drop shadow]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/ae314df0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/ae314df0/attachment.jpg>

From jerry.benton at mailborder.com  Tue Aug 15 00:27:31 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 14 Aug 2017 20:27:31 -0400
Subject: Enquiry regarding a new version
In-Reply-To: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
Message-ID: <021901d3155d$48e62320$dab26960$@mailborder.com>

Yes. Shawn Iverson is kindly working on the next release. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of Eoin Kim
Sent: Monday, August 14, 2017 8:26 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Enquiry regarding a new version

 

G'day Jerry,

 

It might sound like a stupid question but I'd like to know if you have any
plans for a new stable version release soon as I am planning a test of newer
MailScanner than my company's current one. Thanks.

 

Eoin Kim

Systems Administrator

 

RCS Telecommunications 

Level 1 - The Annexe

133 Mary Street

Brisbane, QLD, 4000 

Office:   07 3228 0843

Mobile: 0419 726 231

 



 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170814/2f0ba8d4/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170814/2f0ba8d4/attachment.jpg>

From Eoin.Kim at rcst.com.au  Tue Aug 15 00:41:40 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 15 Aug 2017 00:41:40 +0000
Subject: Enquiry regarding a new version
In-Reply-To: <021901d3155d$48e62320$dab26960$@mailborder.com>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
Message-ID: <a34362f03ac14d17a80cece7a6f93413@rcst.com.au>

Thanks Jerry. Is it going to be like soon soon?

Eoin

From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Tuesday, 15 August 2017 10:28 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Enquiry regarding a new version

Yes. Shawn Iverson is kindly working on the next release.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Eoin Kim
Sent: Monday, August 14, 2017 8:26 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Enquiry regarding a new version

G'day Jerry,

It might sound like a stupid question but I'd like to know if you have any plans for a new stable version release soon as I am planning a test of newer MailScanner than my company's current one. Thanks.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 - The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231

[RCST logo drop shadow]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/ae5c4138/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/ae5c4138/attachment.jpg>

From iversons at rushville.k12.in.us  Tue Aug 15 00:42:52 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Mon, 14 Aug 2017 20:42:52 -0400
Subject: Enquiry regarding a new version
In-Reply-To: <021901d3155d$48e62320$dab26960$@mailborder.com>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
Message-ID: <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>

Yes, apologies for the delay, had a rough week and unexpected weekend at
work.  Sadly, I, too, must work for a living....

I will try to wrap this up this week.

On Mon, Aug 14, 2017 at 8:27 PM, Jerry Benton <jerry.benton at mailborder.com>
wrote:

> Yes. Shawn Iverson is kindly working on the next release.
>
>
>
>
>
> --
>
> Jerry Benton
>
> www.mailborder.com
> +1   (843) 800-8605 <(843)%20800-8605>
>
> +44 (020) 3883-8605 <+44%2020%203883%208605>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+jerry.benton=
> mailborder.com at lists.mailscanner.info] *On Behalf Of *Eoin Kim
> *Sent:* Monday, August 14, 2017 8:26 PM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Enquiry regarding a new version
>
>
>
> G?day Jerry,
>
>
>
> It might sound like a stupid question but I?d like to know if you have any
> plans for a new stable version release soon as I am planning a test of
> newer MailScanner than my company?s current one. Thanks.
>
>
>
> *Eoin Kim*
>
> Systems Administrator
>
>
>
> *RCS Telecommunications *
>
> Level 1 ? The Annexe
>
> 133 Mary Street
>
> Brisbane, QLD, 4000
>
> Office:   07 3228 0843
>
> Mobile: 0419 726 231
>
>
>
> [image: RCST logo drop shadow]
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170814/0b6a8ee4/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170814/0b6a8ee4/attachment.jpg>

From Eoin.Kim at rcst.com.au  Tue Aug 15 00:54:14 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 15 Aug 2017 00:54:14 +0000
Subject: Enquiry regarding a new version
In-Reply-To: <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
 <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
Message-ID: <e38006b6da9c4208ad5951230ec0f8a4@rcst.com.au>

Thanks a million guys. Really appreciate it. Cheers.

Eoin

From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Tuesday, 15 August 2017 10:43 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Enquiry regarding a new version

Yes, apologies for the delay, had a rough week and unexpected weekend at work.  Sadly, I, too, must work for a living....

I will try to wrap this up this week.

On Mon, Aug 14, 2017 at 8:27 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
Yes. Shawn Iverson is kindly working on the next release.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605<tel:(843)%20800-8605>
+44 (020) 3883-8605<tel:+44%2020%203883%208605>

From: MailScanner [mailto:mailscanner-bounces+jerry.benton<mailto:mailscanner-bounces%2Bjerry.benton>=mailborder.com at lists.mailscanner.info<mailto:mailborder.com at lists.mailscanner.info>] On Behalf Of Eoin Kim
Sent: Monday, August 14, 2017 8:26 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Enquiry regarding a new version

G?day Jerry,

It might sound like a stupid question but I?d like to know if you have any plans for a new stable version release soon as I am planning a test of newer MailScanner than my company?s current one. Thanks.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 ? The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231

[RCST logo drop shadow]




--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[Image removed by sender.][Image removed by sender.]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/e29ad7c8/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ~WRD000.jpg
Type: image/jpeg
Size: 823 bytes
Desc: ~WRD000.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/e29ad7c8/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170815/e29ad7c8/attachment-0001.jpg>

From donnerk at gmail.com  Wed Aug 16 10:41:37 2017
From: donnerk at gmail.com (Nerk Nerk)
Date: Wed, 16 Aug 2017 12:41:37 +0200
Subject: Disable (some) virus scans?
Message-ID: <CAMk2VrRXdoiWUZZMyLHz85_5p5eXgyvcZJuXGWBZwb_7uXefuA@mail.gmail.com>

We have a lot of false positives on the virusscanning. Loads of .docx files
get detected as virus.

Also files with 'double' extensions, such as "your invoice.docx.pdf" or
"yourwebsite.com.psd" get blocked.

I understand why that happens (first case: .docx are risky, second case:
looks like you are trying to hide the true extension) but still I would
like to accept those messages. Is it possible and easy to make that happen?

I think it is the virusscanning that Mailscanner does, not the
virusscanning done by Clamav that I also use.

Thanks in advance for any answers!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170816/6bf751ba/attachment.html>

From jerry.benton at mailborder.com  Wed Aug 16 10:45:23 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 16 Aug 2017 06:45:23 -0400
Subject: Disable (some) virus scans?
In-Reply-To: <CAMk2VrRXdoiWUZZMyLHz85_5p5eXgyvcZJuXGWBZwb_7uXefuA@mail.gmail.com>
References: <CAMk2VrRXdoiWUZZMyLHz85_5p5eXgyvcZJuXGWBZwb_7uXefuA@mail.gmail.com>
Message-ID: <032201d3167c$c3b8f2b0$4b2ad810$@mailborder.com>

That is not from virus scanning. You need to allow multiple file extensions, and you need to allow executable MIME types because rather often Linux identifies Microsoft files as executables because they contain things like printer_settings.bin embedded within the files. You can still block .exe and other file types via your file policy. 

 

 

--

Jerry Benton

www.mailborder.com <http://www.mailborder.com/> 
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Nerk Nerk
Sent: Wednesday, August 16, 2017 6:42 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Disable (some) virus scans?

 

We have a lot of false positives on the virusscanning. Loads of .docx files get detected as virus.

 

Also files with 'double' extensions, such as "your invoice.docx.pdf" or "yourwebsite.com.psd" get blocked.

 

I understand why that happens (first case: .docx are risky, second case: looks like you are trying to hide the true extension) but still I would like to accept those messages. Is it possible and easy to make that happen?

 

I think it is the virusscanning that Mailscanner does, not the virusscanning done by Clamav that I also use.

 

Thanks in advance for any answers!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170816/0fbdf2f6/attachment.html>

From donnerk at gmail.com  Wed Aug 16 11:04:11 2017
From: donnerk at gmail.com (Nerk Nerk)
Date: Wed, 16 Aug 2017 13:04:11 +0200
Subject: Disable (some) virus scans?
In-Reply-To: <032201d3167c$c3b8f2b0$4b2ad810$@mailborder.com>
References: <CAMk2VrRXdoiWUZZMyLHz85_5p5eXgyvcZJuXGWBZwb_7uXefuA@mail.gmail.com>
 <032201d3167c$c3b8f2b0$4b2ad810$@mailborder.com>
Message-ID: <CAMk2VrQJuM=t4MdkYgF6NO7yv+3Nxh1Zcs4GH2QPt8jr97zTww@mail.gmail.com>

Hi Jerry, Thanks for your response. Any clues on how to allow multiple file
extensions?

Thanks!


2017-08-16 12:45 GMT+02:00 Jerry Benton <jerry.benton at mailborder.com>:

> That is not from virus scanning. You need to allow multiple file
> extensions, and you need to allow executable MIME types because rather
> often Linux identifies Microsoft files as executables because they contain
> things like printer_settings.bin embedded within the files. You can still
> block .exe and other file types via your file policy.
>
>
>
>
>
> --
>
> Jerry Benton
>
> www.mailborder.com
> +1   (843) 800-8605 <(843)%20800-8605>
>
> +44 (020) 3883-8605 <+44%2020%203883%208605>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+jerry.benton=
> mailborder.com at lists.mailscanner.info] *On Behalf Of *Nerk Nerk
> *Sent:* Wednesday, August 16, 2017 6:42 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Disable (some) virus scans?
>
>
>
> We have a lot of false positives on the virusscanning. Loads of .docx
> files get detected as virus.
>
>
>
> Also files with 'double' extensions, such as "your invoice.docx.pdf" or
> "yourwebsite.com.psd" get blocked.
>
>
>
> I understand why that happens (first case: .docx are risky, second case:
> looks like you are trying to hide the true extension) but still I would
> like to accept those messages. Is it possible and easy to make that happen?
>
>
>
> I think it is the virusscanning that Mailscanner does, not the
> virusscanning done by Clamav that I also use.
>
>
>
> Thanks in advance for any answers!
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170816/f5e45705/attachment.html>

From pramod at mindspring.co.za  Thu Aug 17 14:14:30 2017
From: pramod at mindspring.co.za (Pramod Daya)
Date: Thu, 17 Aug 2017 14:14:30 +0000
Subject: Spam Score logging
Message-ID: <AM5PR0402MB2868B93EFBA0C2DCFA9DFAEBF7830@AM5PR0402MB2868.eurprd04.prod.outlook.com>

I'm trying to enable spam score logging (in /var/log/maillog) on a Centos 7 System,  with MailScanner 5.0.3 and spamassassin 3.4.0.

As far as I can determine, this is done by including in local.cf:

add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ Report _REPORT_
add_header all Level _STARS(*)

But I'm not getting the score displayed.

Any advice, please ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170817/0d6d7370/attachment.html>

From rafael.tomelin at gmail.com  Fri Aug 18 01:42:43 2017
From: rafael.tomelin at gmail.com (Rafael Tomelin)
Date: Fri, 18 Aug 2017 01:42:43 +0000
Subject: Problem in visualize e-mail with MailWatch
Message-ID: <CAGEUqbC7r6iEF2er8ZMm+xL+rfxLifP6yFzsXXWzqMY6U+fDOQ@mail.gmail.com>

Hi Dear,

I have MailScanner and now with MailWatch, in mailwatch not visualize
e-mails the black wide .

I log the mysql, is correct connect and query.

Whats is problem? How resolved ?

Thanks
-- 
Atenciosamente,
Rafael Tomelin
skype: rafael.tomelin
E-mail: rafael.tomelin at gmail.com

RHCE - Red Hat Certified Engineer
Zabbix - ZABBIX Certified Specialist
LPI3
ITIL v3
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170818/eb8a37a2/attachment.html>

From richard at fastnet.co.uk  Fri Aug 18 13:44:02 2017
From: richard at fastnet.co.uk (Richard Mealing)
Date: Fri, 18 Aug 2017 13:44:02 +0000
Subject: Spam Score logging
In-Reply-To: <AM5PR0402MB2868B93EFBA0C2DCFA9DFAEBF7830@AM5PR0402MB2868.eurprd04.prod.outlook.com>
References: <AM5PR0402MB2868B93EFBA0C2DCFA9DFAEBF7830@AM5PR0402MB2868.eurprd04.prod.outlook.com>
Message-ID: <6EE47AF64C339A4F8F7F50507241B3795FC4F903@BTN-EXCHANGE-V1.fastnet.local>

Is mailscanner logging spam?

Check the following in mailscanner.conf

Log Spam = yes
Log Non Spam = yes

From: MailScanner [mailto:mailscanner-bounces+richard=fastnet.co.uk at lists.mailscanner.info] On Behalf Of Pramod Daya
Sent: Thursday, August 17, 2017 15:15
To: mailscanner at lists.mailscanner.info
Subject: Spam Score logging

I'm trying to enable spam score logging (in /var/log/maillog) on a Centos 7 System,  with MailScanner 5.0.3 and spamassassin 3.4.0.

As far as I can determine, this is done by including in local.cf:

add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ Report _REPORT_
add_header all Level _STARS(*)

But I'm not getting the score displayed.

Any advice, please ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170818/5f0a4ae8/attachment.html>

From richard at fastnet.co.uk  Fri Aug 18 13:48:04 2017
From: richard at fastnet.co.uk (Richard Mealing)
Date: Fri, 18 Aug 2017 13:48:04 +0000
Subject: Problem in visualize e-mail with MailWatch
In-Reply-To: <CAGEUqbC7r6iEF2er8ZMm+xL+rfxLifP6yFzsXXWzqMY6U+fDOQ@mail.gmail.com>
References: <CAGEUqbC7r6iEF2er8ZMm+xL+rfxLifP6yFzsXXWzqMY6U+fDOQ@mail.gmail.com>
Message-ID: <6EE47AF64C339A4F8F7F50507241B3795FC4F931@BTN-EXCHANGE-V1.fastnet.local>

Probably better suited for the mailwatch list.
Are you using the latest version of mailwatch?
Try the develop branch. It?s coming along very nicely - https://github.com/mailwatch/MailWatch/tree/develop


From: MailScanner [mailto:mailscanner-bounces+richard=fastnet.co.uk at lists.mailscanner.info] On Behalf Of Rafael Tomelin
Sent: Friday, August 18, 2017 02:43
To: mailscanner at lists.mailscanner.info
Subject: Problem in visualize e-mail with MailWatch

Hi Dear,

I have MailScanner and now with MailWatch, in mailwatch not visualize e-mails the black wide .

I log the mysql, is correct connect and query.

Whats is problem? How resolved ?

Thanks
--
Atenciosamente,
Rafael Tomelin
skype: rafael.tomelin
E-mail: rafael.tomelin at gmail.com<mailto:rafael.tomelin at gmail.com>

RHCE - Red Hat Certified Engineer
Zabbix - ZABBIX Certified Specialist
LPI3
ITIL v3


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170818/8169bab5/attachment.html>

From sales at edenusa.com  Sun Aug 20 23:53:12 2017
From: sales at edenusa.com (Paul Scott)
Date: Sun, 20 Aug 2017 23:53:12 +0000
Subject: Enquiry regarding a new version
In-Reply-To: <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
 <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
Message-ID: <SN1PR10MB0590A2F5C057E824BD9B3D90B0860@SN1PR10MB0590.namprd10.prod.outlook.com>

Hello Shawn and Jerry,

Will this be the version that I can use to do a fresh install on the latest CentOS release?

I am still currently running on a revision that stopped doing updates as of this April.

Please let me know.  Thank you so much!

Sincerely,

Paul Scott, Engineer
Eden USA, Incorporated
Event Production Services Since 1995
Los Angeles-Las Vegas-New York
sales at edenusa.com<mailto:sales at edenusa.com> OR edenusasales at gmail.com<mailto:edenusasales at gmail.com>
Telephone(s): 866.501.3336 OR 951.505.6967
Fax: 866.502.3336

WEBSITE: https://www.edenusa.com
FACEBOOK: http://www.facebook.com/edenusainc

From: MailScanner [mailto:mailscanner-bounces+sales=edenusa.com at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Monday, August 14, 2017 5:43 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Enquiry regarding a new version

Yes, apologies for the delay, had a rough week and unexpected weekend at work.  Sadly, I, too, must work for a living....

I will try to wrap this up this week.

On Mon, Aug 14, 2017 at 8:27 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
Yes. Shawn Iverson is kindly working on the next release.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605<tel:(843)%20800-8605>
+44 (020) 3883-8605<tel:+44%2020%203883%208605>

From: MailScanner [mailto:mailscanner-bounces+jerry.benton<mailto:mailscanner-bounces%2Bjerry.benton>=mailborder.com at lists.mailscanner.info<mailto:mailborder.com at lists.mailscanner.info>] On Behalf Of Eoin Kim
Sent: Monday, August 14, 2017 8:26 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Enquiry regarding a new version

G?day Jerry,

It might sound like a stupid question but I?d like to know if you have any plans for a new stable version release soon as I am planning a test of newer MailScanner than my company?s current one. Thanks.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 ? The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231

[RCST logo drop shadow]




--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170820/d1365b79/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170820/d1365b79/attachment.jpg>

From mailinglists at feedmebits.nl  Mon Aug 21 06:46:58 2017
From: mailinglists at feedmebits.nl (Maarten)
Date: Mon, 21 Aug 2017 08:46:58 +0200
Subject: Enquiry regarding a new version
In-Reply-To: <SN1PR10MB0590A2F5C057E824BD9B3D90B0860@SN1PR10MB0590.namprd10.prod.outlook.com>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
 <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
 <SN1PR10MB0590A2F5C057E824BD9B3D90B0860@SN1PR10MB0590.namprd10.prod.outlook.com>
Message-ID: <b40c8c3dcaf3ff25cb9e6002ccbe4983@feedmebits.nl>

Hello Paul,

This question has been answered already early this month. Here's the 
thread for you ;)

http://lists.mailscanner.info/pipermail/mailscanner/2017-August/104698.html

Cheers!

Maarten


On 2017-08-21 01:53, Paul Scott wrote:
> Hello Shawn and Jerry,
> 
> Will this be the version that I can use to do a fresh install on the
> latest CentOS release?
> 
> I am still currently running on a revision that stopped doing updates
> as of this April.
> 
> Please let me know.  Thank you so much!
> 
> Sincerely,
> 
> Paul Scott, Engineer
> 
> Eden USA, Incorporated
> Event Production Services Since 1995
> Los Angeles-Las Vegas-New York
> sales at edenusa.com OR edenusasales at gmail.com
> Telephone(s): 866.501.3336 OR 951.505.6967
> Fax: 866.502.3336
> 
> WEBSITE: https://www.edenusa.com
> 
> FACEBOOK: http://www.facebook.com/edenusainc
> 
> FROM: MailScanner
> [mailto:mailscanner-bounces+sales=edenusa.com at lists.mailscanner.info]
> ON BEHALF OF Shawn Iverson
> SENT: Monday, August 14, 2017 5:43 PM
> TO: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> SUBJECT: Re: Enquiry regarding a new version
> 
> Yes, apologies for the delay, had a rough week and unexpected weekend
> at work.  Sadly, I, too, must work for a living....
> 
> I will try to wrap this up this week.
> 
> On Mon, Aug 14, 2017 at 8:27 PM, Jerry Benton
> <jerry.benton at mailborder.com> wrote:
> 
>> Yes. Shawn Iverson is kindly working on the next release.
>> 
>> --
>> 
>> Jerry Benton
>> 
>> www.mailborder.com [1]
>> +1   (843) 800-8605 [2]
>> 
>> +44 (020) 3883-8605 [3]
>> 
>> FROM: MailScanner
>> 
> [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info]
>> ON BEHALF OF Eoin Kim
>> SENT: Monday, August 14, 2017 8:26 PM
>> TO: MailScanner Discussion <mailscanner at lists.mailscanner.info>
>> SUBJECT: Enquiry regarding a new version
>> 
>> G?day Jerry,
>> 
>> It might sound like a stupid question but I?d like to know if you
>> have any plans for a new stable version release soon as I am
>> planning a test of newer MailScanner than my company?s current
>> one. Thanks.
>> 
>> EOIN KIM
>> 
>> Systems Administrator
>> 
>> RCS TELECOMMUNICATIONS
>> 
>> Level 1 ? The Annexe
>> 
>> 133 Mary Street
>> 
>> Brisbane, QLD, 4000
>> 
>> Office:   07 3228 0843
>> 
>> Mobile: 0419 726 231
>> 
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> --
> 
> Shawn Iverson, CETL
> 
> Director of Technology
> 
> Rush County Schools
> 
> 765-932-3901 x271
> 
> iversons at rushville.k12.in.us
> 
> 
> 
> Links:
> ------
> [1] http://www.mailborder.com/
> [2] tel:(843)%20800-8605
> [3] tel:&#43;44%2020%203883%208605

From jerry.benton at mailborder.com  Mon Aug 21 15:35:00 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 21 Aug 2017 11:35:00 -0400
Subject: Phishing Server Change
Message-ID: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>

All,

There is a new phishing update script available here:
http://phishing.mailscanner.info

Eventually, I am going to block access to the update files if this script is
not being used by your server. So, please update your scripts. This script
combines the safe and bad updates. The script will be updated once again in
the future for this issue, but it is not critical right now.

https://github.com/MailScanner/v5/issues/82


Thanks to all who worked on this. 


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605




From sales at edenusa.com  Mon Aug 21 16:32:44 2017
From: sales at edenusa.com (Paul Scott)
Date: Mon, 21 Aug 2017 16:32:44 +0000
Subject: Enquiry regarding a new version
In-Reply-To: <b40c8c3dcaf3ff25cb9e6002ccbe4983@feedmebits.nl>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
 <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
 <SN1PR10MB0590A2F5C057E824BD9B3D90B0860@SN1PR10MB0590.namprd10.prod.outlook.com>,
 <b40c8c3dcaf3ff25cb9e6002ccbe4983@feedmebits.nl>
Message-ID: <SN1PR10MB0590936B5417F191385131E3B0870@SN1PR10MB0590.namprd10.prod.outlook.com>

Correct.  But what is the current status and ETA for release?

Get Outlook for Android<https://aka.ms/ghei36>

________________________________
From: Maarten <mailinglists at feedmebits.nl>
Sent: Sunday, August 20, 2017 11:46:58 PM
To: MailScanner Discussion
Cc: Paul Scott
Subject: Re: Enquiry regarding a new version

Hello Paul,

This question has been answered already early this month. Here's the
thread for you ;)

http://lists.mailscanner.info/pipermail/mailscanner/2017-August/104698.html

Cheers!

Maarten


On 2017-08-21 01:53, Paul Scott wrote:
> Hello Shawn and Jerry,
>
> Will this be the version that I can use to do a fresh install on the
> latest CentOS release?
>
> I am still currently running on a revision that stopped doing updates
> as of this April.
>
> Please let me know.  Thank you so much!
>
> Sincerely,
>
> Paul Scott, Engineer
>
> Eden USA, Incorporated
> Event Production Services Since 1995
> Los Angeles-Las Vegas-New York
> sales at edenusa.com OR edenusasales at gmail.com
> Telephone(s): 866.501.3336 OR 951.505.6967
> Fax: 866.502.3336
>
> WEBSITE: https://www.edenusa.com
>
> FACEBOOK: http://www.facebook.com/edenusainc
>
> FROM: MailScanner
> [mailto:mailscanner-bounces+sales=edenusa.com at lists.mailscanner.info]
> ON BEHALF OF Shawn Iverson
> SENT: Monday, August 14, 2017 5:43 PM
> TO: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> SUBJECT: Re: Enquiry regarding a new version
>
> Yes, apologies for the delay, had a rough week and unexpected weekend
> at work.  Sadly, I, too, must work for a living....
>
> I will try to wrap this up this week.
>
> On Mon, Aug 14, 2017 at 8:27 PM, Jerry Benton
> <jerry.benton at mailborder.com> wrote:
>
>> Yes. Shawn Iverson is kindly working on the next release.
>>
>> --
>>
>> Jerry Benton
>>
>> www.mailborder.com<http://www.mailborder.com> [1]
>> +1   (843) 800-8605 [2]
>>
>> +44 (020) 3883-8605 [3]
>>
>> FROM: MailScanner
>>
> [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info]
>> ON BEHALF OF Eoin Kim
>> SENT: Monday, August 14, 2017 8:26 PM
>> TO: MailScanner Discussion <mailscanner at lists.mailscanner.info>
>> SUBJECT: Enquiry regarding a new version
>>
>> G?day Jerry,
>>
>> It might sound like a stupid question but I?d like to know if you
>> have any plans for a new stable version release soon as I am
>> planning a test of newer MailScanner than my company?s current
>> one. Thanks.
>>
>> EOIN KIM
>>
>> Systems Administrator
>>
>> RCS TELECOMMUNICATIONS
>>
>> Level 1 ? The Annexe
>>
>> 133 Mary Street
>>
>> Brisbane, QLD, 4000
>>
>> Office:   07 3228 0843
>>
>> Mobile: 0419 726 231
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271
>
> iversons at rushville.k12.in.us
>
>
>
> Links:
> ------
> [1] http://www.mailborder.com/
> [2] tel:(843)%20800-8605
> [3] tel:&#43;44%2020%203883%208605
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170821/3a726877/attachment.html>

From iversons at rushville.k12.in.us  Mon Aug 21 17:07:07 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Mon, 21 Aug 2017 13:07:07 -0400
Subject: Enquiry regarding a new version
In-Reply-To: <SN1PR10MB0590936B5417F191385131E3B0870@SN1PR10MB0590.namprd10.prod.outlook.com>
References: <c010b6757b9349edbac913f0309a5cc5@rcst.com.au>
 <021901d3155d$48e62320$dab26960$@mailborder.com>
 <CABu_8zJB1YoWdyNmVN9DTgM2wK7um_mDGwPrf3y4CfwcWLnrYA@mail.gmail.com>
 <SN1PR10MB0590A2F5C057E824BD9B3D90B0860@SN1PR10MB0590.namprd10.prod.outlook.com>
 <b40c8c3dcaf3ff25cb9e6002ccbe4983@feedmebits.nl>
 <SN1PR10MB0590936B5417F191385131E3B0870@SN1PR10MB0590.namprd10.prod.outlook.com>
Message-ID: <CABu_8zLSYmUoZzeW+-EY9hHwBoY0UEZLm_AO+5siiV6pSdeBfQ@mail.gmail.com>

Refresh your page ;)

https://www.mailscanner.info/

On Mon, Aug 21, 2017 at 12:32 PM, Paul Scott <sales at edenusa.com> wrote:

> Correct.  But what is the current status and ETA for release?
>
> Get Outlook for Android <https://aka.ms/ghei36>
>
> ------------------------------
> *From:* Maarten <mailinglists at feedmebits.nl>
> *Sent:* Sunday, August 20, 2017 11:46:58 PM
> *To:* MailScanner Discussion
> *Cc:* Paul Scott
> *Subject:* Re: Enquiry regarding a new version
>
> Hello Paul,
>
> This question has been answered already early this month. Here's the
> thread for you ;)
>
> http://lists.mailscanner.info/pipermail/mailscanner/2017-
> August/104698.html
>
> Cheers!
>
> Maarten
>
>
> On 2017-08-21 01:53, Paul Scott wrote:
> > Hello Shawn and Jerry,
> >
> > Will this be the version that I can use to do a fresh install on the
> > latest CentOS release?
> >
> > I am still currently running on a revision that stopped doing updates
> > as of this April.
> >
> > Please let me know.  Thank you so much!
> >
> > Sincerely,
> >
> > Paul Scott, Engineer
> >
> > Eden USA, Incorporated
> > Event Production Services Since 1995
> > Los Angeles-Las Vegas-New York
> > sales at edenusa.com OR edenusasales at gmail.com
> > Telephone(s): 866.501.3336 <(866)%20501-3336> OR 951.505.6967
> <(951)%20505-6967>
> > Fax: 866.502.3336 <(866)%20502-3336>
> >
> > WEBSITE: https://www.edenusa.com
> >
> > FACEBOOK: http://www.facebook.com/edenusainc
> >
> > FROM: MailScanner
> > [mailto:mailscanner-bounces+sales=edenusa.com at lists.mailscanner.info
> <mailscanner-bounces+sales=edenusa.com at lists.mailscanner.info>]
> > ON BEHALF OF Shawn Iverson
> > SENT: Monday, August 14, 2017 5:43 PM
> > TO: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> > SUBJECT: Re: Enquiry regarding a new version
> >
> > Yes, apologies for the delay, had a rough week and unexpected weekend
> > at work.  Sadly, I, too, must work for a living....
> >
> > I will try to wrap this up this week.
> >
> > On Mon, Aug 14, 2017 at 8:27 PM, Jerry Benton
> > <jerry.benton at mailborder.com> wrote:
> >
> >> Yes. Shawn Iverson is kindly working on the next release.
> >>
> >> --
> >>
> >> Jerry Benton
> >>
> >> www.mailborder.com [1]
> >> +1   (843) 800-8605 [2]
> >>
> >> +44 (020) 3883-8605 [3]
> >>
> >> FROM: MailScanner
> >>
> > [mailto:mailscanner-bounces+jerry.benton=mailborder.com@
> lists.mailscanner.info
> <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info>]
> >> ON BEHALF OF Eoin Kim
> >> SENT: Monday, August 14, 2017 8:26 PM
> >> TO: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> >> SUBJECT: Enquiry regarding a new version
> >>
> >> G?day Jerry,
> >>
> >> It might sound like a stupid question but I?d like to know if you
> >> have any plans for a new stable version release soon as I am
> >> planning a test of newer MailScanner than my company?s current
> >> one. Thanks.
> >>
> >> EOIN KIM
> >>
> >> Systems Administrator
> >>
> >> RCS TELECOMMUNICATIONS
> >>
> >> Level 1 ? The Annexe
> >>
> >> 133 Mary Street
> >>
> >> Brisbane, QLD, 4000
> >>
> >> Office:   07 3228 0843
> >>
> >> Mobile: 0419 726 231
> >>
> >> --
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > --
> >
> > Shawn Iverson, CETL
> >
> > Director of Technology
> >
> > Rush County Schools
> >
> > 765-932-3901 x271 <(765)%20932-3901>
> >
> > iversons at rushville.k12.in.us
> >
> >
> >
> > Links:
> > ------
> > [1] http://www.mailborder.com/
> > [2] tel:(843)%20800-8605
> > [3] tel:&#43;44%2020%203883%208605
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170821/1b50fe17/attachment.html>

From jerry.benton at mailborder.com  Mon Aug 21 17:08:17 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 21 Aug 2017 13:08:17 -0400
Subject: v5.0.6 Released
Message-ID: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>

The new version has been published here:
https://www.mailscanner.info/downloads/



--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605




From donnerk at gmail.com  Tue Aug 22 05:48:14 2017
From: donnerk at gmail.com (Nerk Nerk)
Date: Tue, 22 Aug 2017 07:48:14 +0200
Subject: v5.0.6 Released
In-Reply-To: <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
Message-ID: <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>

Great work Jerry!

What is the normal way to update... Just Download and run install.sh?

Op 21 aug. 2017 19:08 schreef "Jerry Benton" <jerry.benton at mailborder.com>:

The new version has been published here:
https://www.mailscanner.info/downloads/



--
Jerry Benton
www.mailborder.com
+1 (843) 800-8605
+44 (020) 3883-8605





--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/7ff49b35/attachment.html>

From jerry.benton at mailborder.com  Tue Aug 22 06:04:47 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Tue, 22 Aug 2017 02:04:47 -0400
Subject: v5.0.6 Released
In-Reply-To: <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
 <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
Message-ID: <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>

Wasn?t me this time. It was all Shawn Iverson.

 

Yes. Download and run install.sh. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Nerk Nerk
Sent: Tuesday, August 22, 2017 1:48 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: v5.0.6 Released

 

Great work Jerry!

 

What is the normal way to update... Just Download and run install.sh?

 

Op 21 aug. 2017 19:08 schreef "Jerry Benton" <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >:

The new version has been published here:
https://www.mailscanner.info/downloads/



--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605> 
+44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605> 





--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/e7c6375e/attachment.html>

From it at festa.bg  Tue Aug 22 08:16:43 2017
From: it at festa.bg (Valentin Laskov)
Date: Tue, 22 Aug 2017 11:16:43 +0300
Subject: Phishing Server Change
In-Reply-To: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
Message-ID: <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>

Hi,

not a pain

"Add your custom Phishing bad sites to the"? on line 69 must be

"Add your custom Phishing safe sites to the"


Is the script suitable to MailScanner v. 4.84.6-1 after changing config 
path ?

Regards
Valentin Laskov


From thom at vdb.nl  Tue Aug 22 10:04:42 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Tue, 22 Aug 2017 12:04:42 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
Message-ID: <1993835113.202859.1503396282537.JavaMail.zimbra@vdb.nl>

Thanks.... changed it in the script I am currently testing 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Valentin Laskov" <it at festa.bg> 
Aan: "MailScanner discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Dinsdag 22 augustus 2017 10:16:43 
Onderwerp: Re: Phishing Server Change 

Hi, 

not a pain 

"Add your custom Phishing bad sites to the" on line 69 must be 

"Add your custom Phishing safe sites to the" 


Is the script suitable to MailScanner v. 4.84.6-1 after changing config 
path ? 

Regards 
Valentin Laskov 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/29cf028a/attachment.html>

From thomasl at mtl.mit.edu  Tue Aug 22 14:41:59 2017
From: thomasl at mtl.mit.edu (Thomas Lohman)
Date: Tue, 22 Aug 2017 10:41:59 -0400
Subject: Phishing Server Change
In-Reply-To: <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
Message-ID: <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>

Hi,

how does the script deal with the use case where the master has not 
changed on the remote site (thus no new copy is downloaded) but the 
custom file has changed since the last run?  It looks like the changes 
to the custom file will not be merged into the 
phishing.safe.sites.conf/phishing.bad.sites.conf file unless 
safe_updated/bad_updated has been set to 1.

thanks,


--tom



From thom at vdb.nl  Tue Aug 22 14:44:55 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Tue, 22 Aug 2017 16:44:55 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
 <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
Message-ID: <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>

Hi Tom, 

It does not. Will incorporate that in the next version. 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Thomas Lohman" <thomasl at mtl.mit.edu> 
Aan: mailscanner at lists.mailscanner.info 
Verzonden: Dinsdag 22 augustus 2017 16:41:59 
Onderwerp: Re: Phishing Server Change 

Hi, 

how does the script deal with the use case where the master has not 
changed on the remote site (thus no new copy is downloaded) but the 
custom file has changed since the last run? It looks like the changes 
to the custom file will not be merged into the 
phishing.safe.sites.conf/phishing.bad.sites.conf file unless 
safe_updated/bad_updated has been set to 1. 

thanks, 


--tom 




-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/d9ead931/attachment.html>

From gao at pztop.com  Tue Aug 22 16:30:51 2017
From: gao at pztop.com (Gao)
Date: Tue, 22 Aug 2017 09:30:51 -0700
Subject: v5.0.6 Released
In-Reply-To: <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
 <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
 <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>
Message-ID: <4f51c49c-0743-02c8-8d65-4c2a60f97650@pztop.com>

Hi,

I'd like to test the new version and what is the best way to setup a 
test system? My production system is CentOS7+Postfix+MailScanner. I plan 
to build another system to test. How can I duplicate all the incoming 
email to my test system?

Thanks

Gao

On 2017-08-21 11:04 PM, Jerry Benton wrote:
>
> Wasn?t me this time. It was all Shawn Iverson.
>
> Yes. Download and run install.sh.
>
> --
>
> Jerry Benton
>
> www.mailborder.com <http://www.mailborder.com/>
> +1   (843) 800-8605
>
> +44 (020) 3883-8605
>
> *From:* MailScanner 
> [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] 
> *On Behalf Of *Nerk Nerk
> *Sent:* Tuesday, August 22, 2017 1:48 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: v5.0.6 Released
>
> Great work Jerry!
>
> What is the normal way to update... Just Download and run install.sh?
>
> Op 21 aug. 2017 19:08 schreef "Jerry Benton" 
> <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com>>:
>
>     The new version has been published here:
>     https://www.mailscanner.info/downloads/
>
>
>
>     --
>     Jerry Benton
>     www.mailborder.com <http://www.mailborder.com>
>     +1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605>
>     +44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605>
>
>
>
>
>
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/59e02217/attachment.html>

From thomasl at mtl.mit.edu  Tue Aug 22 17:06:16 2017
From: thomasl at mtl.mit.edu (Thomas Lohman)
Date: Tue, 22 Aug 2017 13:06:16 -0400
Subject: Phishing Server Change
In-Reply-To: <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
 <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
 <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>
Message-ID: <5750ea18-f43e-f9be-517b-56c1d722afab@mtl.mit.edu>

Hi Thom,

I've attached a patch based off the copy of the script downloaded from 
the site that seems to be working for me.  It should update the bad/safe 
conf files if either the date of the master or the custom file is newer 
than the conf file date.

hopefully it is useful.


--tom


On 08/22/2017 10:44 AM, Thom van der Boon wrote:
> Hi Tom,
>
> It does not. Will incorporate that in the next version.
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA Babberich
> Tel.: +31 (0)88 4272727
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------------------------------------------------
> *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Dinsdag 22 augustus 2017 16:41:59
> *Onderwerp: *Re: Phishing Server Change
>
> Hi,
>
> how does the script deal with the use case where the master has not
> changed on the remote site (thus no new copy is downloaded) but the
> custom file has changed since the last run?  It looks like the changes
> to the custom file will not be merged into the
> phishing.safe.sites.conf/phishing.bad.sites.conf file unless
> safe_updated/bad_updated has been set to 1.
>
> thanks,
>
>
> --tom
>
>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/2f936ec3/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ms-update-phishing.patch
Type: text/x-patch
Size: 3317 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/2f936ec3/attachment.bin>

From iversons at rushville.k12.in.us  Tue Aug 22 19:50:48 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Tue, 22 Aug 2017 15:50:48 -0400
Subject: v5.0.6 Released
In-Reply-To: <4f51c49c-0743-02c8-8d65-4c2a60f97650@pztop.com>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
 <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
 <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>
 <4f51c49c-0743-02c8-8d65-4c2a60f97650@pztop.com>
Message-ID: <CABu_8zJ5vdoaUDwxu8H2A0RTYNo9Ja7OgTFWJ-W+si4a+yzwkw@mail.gmail.com>

Gao,

You can set up a test system the same as your original (with a different ip
address and latest software versions, of course).  Just make sure the test
system doesn't deliver to the same destination, otherwise you will start
seeing double (emails, that is).

Duplicating email to a system is not something that you normally do.  It
may be possible somehow in postfix with live mail.  I wouldn't want to
tinker with my production system like that, though.

What I have done before is temporarily stop MailScanner on the production
system just long enough to let some mail queue up in the HOLD queue, make a
copy, then start MailScanner again.  You can then literally drop them into
the same HOLD queue on the test environment and watch it churn through them.


On Tue, Aug 22, 2017 at 12:30 PM, Gao <gao at pztop.com> wrote:

> Hi,
>
> I'd like to test the new version and what is the best way to setup a test
> system? My production system is CentOS7+Postfix+MailScanner. I plan to
> build another system to test. How can I duplicate all the incoming email to
> my test system?
>
> Thanks
>
> Gao
>
> On 2017-08-21 11:04 PM, Jerry Benton wrote:
>
> Wasn?t me this time. It was all Shawn Iverson.
>
>
>
> Yes. Download and run install.sh.
>
>
>
>
>
> --
>
> Jerry Benton
>
> www.mailborder.com
> +1   (843) 800-8605 <(843)%20800-8605>
>
> +44 (020) 3883-8605 <+44%2020%203883%208605>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+
> jerry.benton=mailborder.com at lists.mailscanner.info
> <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info>] *On
> Behalf Of *Nerk Nerk
> *Sent:* Tuesday, August 22, 2017 1:48 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> <mailscanner at lists.mailscanner.info>
> *Subject:* Re: v5.0.6 Released
>
>
>
> Great work Jerry!
>
>
>
> What is the normal way to update... Just Download and run install.sh?
>
>
>
> Op 21 aug. 2017 19:08 schreef "Jerry Benton" <jerry.benton at mailborder.com
> >:
>
> The new version has been published here:
> https://www.mailscanner.info/downloads/
>
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1 (843) 800-8605 <%2B1%20%20%20%28843%29%20800-8605>
> +44 (020) 3883-8605
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/a77a3bbf/attachment.html>

From thom at vdb.nl  Tue Aug 22 20:51:48 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Tue, 22 Aug 2017 22:51:48 +0200 (CEST)
Subject: v5.0.6 Released
In-Reply-To: <CABu_8zJ5vdoaUDwxu8H2A0RTYNo9Ja7OgTFWJ-W+si4a+yzwkw@mail.gmail.com>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
 <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
 <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>
 <4f51c49c-0743-02c8-8d65-4c2a60f97650@pztop.com>
 <CABu_8zJ5vdoaUDwxu8H2A0RTYNo9Ja7OgTFWJ-W+si4a+yzwkw@mail.gmail.com>
Message-ID: <761357483.207939.1503435108495.JavaMail.zimbra@vdb.nl>

The way I do is to route the domain with the least ammount of traffic throu the new mailscanner and keep the rest via the old server. Test everything, solve any problem and when you are satisfied move domains from the old server to the new server graduately 

OR 

In DNS set the new MailScanner server as a backup MX. Much spam senders preference backup MX servers, so it is quite a good playground to catch anything which goes throu your backup MX, when you are happy with the tests stop the primary MX for a short time..... everything will go throu the backup MX and you can restore the old situation in seconds simply by starting the old server 

OR a combination of both scenarios 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Shawn Iverson" <iversons at rushville.k12.in.us> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Dinsdag 22 augustus 2017 21:50:48 
Onderwerp: Re: v5.0.6 Released 

Gao, 

You can set up a test system the same as your original (with a different ip address and latest software versions, of course). Just make sure the test system doesn't deliver to the same destination, otherwise you will start seeing double (emails, that is). 

Duplicating email to a system is not something that you normally do. It may be possible somehow in postfix with live mail. I wouldn't want to tinker with my production system like that, though. 

What I have done before is temporarily stop MailScanner on the production system just long enough to let some mail queue up in the HOLD queue, make a copy, then start MailScanner again. You can then literally drop them into the same HOLD queue on the test environment and watch it churn through them. 


On Tue, Aug 22, 2017 at 12:30 PM, Gao < gao at pztop.com > wrote: 



Hi, 

I'd like to test the new version and what is the best way to setup a test system? My production system is CentOS7+Postfix+MailScanner. I plan to build another system to test. How can I duplicate all the incoming email to my test system? 

Thanks 

Gao 

On 2017-08-21 11:04 PM, Jerry Benton wrote: 

BQ_BEGIN



Wasn?t me this time. It was all Shawn Iverson. 



Yes. Download and run install.sh. 





-- 

Jerry Benton 

www.mailborder.com 
+1 (843) 800-8605 

+44 (020) 3883-8605 





From: MailScanner [ mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info ] On Behalf Of Nerk Nerk 
Sent: Tuesday, August 22, 2017 1:48 AM 
To: MailScanner Discussion <mailscanner at lists.mailscanner.info> 
Subject: Re: v5.0.6 Released 




Great work Jerry! 





What is the normal way to update... Just Download and run install.sh? 





Op 21 aug. 2017 19:08 schreef "Jerry Benton" < jerry.benton at mailborder.com >: 
BQ_BEGIN


The new version has been published here: 
https://www.mailscanner.info/downloads/ 



-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 








BQ_END




-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 



BQ_END




-- 
Shawn Iverson, CETL 
Director of Technology 
Rush County Schools 
765-932-3901 x271 
iversons at rushville.k12.in.us 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/7ebfb6ac/attachment.html>

From gao at pztop.com  Wed Aug 23 00:00:29 2017
From: gao at pztop.com (Gao)
Date: Tue, 22 Aug 2017 17:00:29 -0700
Subject: v5.0.6 Released
In-Reply-To: <761357483.207939.1503435108495.JavaMail.zimbra@vdb.nl>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
 <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
 <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>
 <4f51c49c-0743-02c8-8d65-4c2a60f97650@pztop.com>
 <CABu_8zJ5vdoaUDwxu8H2A0RTYNo9Ja7OgTFWJ-W+si4a+yzwkw@mail.gmail.com>
 <761357483.207939.1503435108495.JavaMail.zimbra@vdb.nl>
Message-ID: <1b5bcf14-a426-6ed5-4023-517c74db6c55@pztop.com>

Hi,

I can't afford to stop the production server. The backup MX sounds like 
a great idea. I'll try it to test the new release.

Another question: How can I migrate the learned Bayes databases to the 
testing system? May I just copy these files(bayes_journal, bayes.mutex,, 
bayes_seen, bayes_toks)over to the new system?

Gao

On 2017-08-22 01:51 PM, Thom van der Boon wrote:
> The way I do is to route the domain with the least ammount of traffic 
> throu the new mailscanner and keep the rest via the old server. Test 
> everything, solve any problem and when you are satisfied move domains 
> from the old server to the new server graduately
>
> OR
>
> In DNS set the new MailScanner server as a backup MX. Much spam 
> senders preference backup MX servers, so it is quite a good playground 
> to catch anything which goes throu your backup MX, when you are happy 
> with the tests stop the primary MX for a short time..... everything 
> will go throu the backup MX and you can restore the old situation in 
> seconds simply by starting the old server
>
> OR a combination of both scenarios
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA Babberich
> Tel.: +31 (0)88 4272727
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------------------------------------------------
> *Van: *"Shawn Iverson" <iversons at rushville.k12.in.us>
> *Aan: *"MailScanner Discussion" <mailscanner at lists.mailscanner.info>
> *Verzonden: *Dinsdag 22 augustus 2017 21:50:48
> *Onderwerp: *Re: v5.0.6 Released
>
> Gao,
>
> You can set up a test system the same as your original (with a 
> different ip address and latest software versions, of course).  Just 
> make sure the test system doesn't deliver to the same destination, 
> otherwise you will start seeing double (emails, that is).
>
> Duplicating email to a system is not something that you normally do.  
> It may be possible somehow in postfix with live mail.  I wouldn't want 
> to tinker with my production system like that, though.
>
> What I have done before is temporarily stop MailScanner on the 
> production system just long enough to let some mail queue up in the 
> HOLD queue, make a copy, then start MailScanner again.  You can then 
> literally drop them into the same HOLD queue on the test environment 
> and watch it churn through them.
>
>
> On Tue, Aug 22, 2017 at 12:30 PM, Gao <gao at pztop.com 
> <mailto:gao at pztop.com>> wrote:
>
>     Hi,
>
>     I'd like to test the new version and what is the best way to setup
>     a test system? My production system is
>     CentOS7+Postfix+MailScanner. I plan to build another system to
>     test. How can I duplicate all the incoming email to my test system?
>
>     Thanks
>
>     Gao
>
>     On 2017-08-21 11:04 PM, Jerry Benton wrote:
>
>         Wasn?t me this time. It was all Shawn Iverson.
>
>         Yes. Download and run install.sh.
>
>         --
>
>         Jerry Benton
>
>         www.mailborder.com <http://www.mailborder.com/>
>         +1 (843) 800-8605 <tel:%28843%29%20800-8605>
>
>         +44 (020) 3883-8605 <tel:+44%2020%203883%208605>
>
>         *From:* MailScanner
>         [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info]
>         *On Behalf Of *Nerk Nerk
>         *Sent:* Tuesday, August 22, 2017 1:48 AM
>         *To:* MailScanner Discussion
>         <mailscanner at lists.mailscanner.info>
>         <mailto:mailscanner at lists.mailscanner.info>
>         *Subject:* Re: v5.0.6 Released
>
>         Great work Jerry!
>
>         What is the normal way to update... Just Download and run
>         install.sh?
>
>         Op 21 aug. 2017 19:08 schreef "Jerry Benton"
>         <jerry.benton at mailborder.com
>         <mailto:jerry.benton at mailborder.com>>:
>
>             The new version has been published here:
>             https://www.mailscanner.info/downloads/
>
>
>
>             --
>             Jerry Benton
>             www.mailborder.com <http://www.mailborder.com>
>             +1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605>
>             +44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605>
>
>
>
>
>
>             --
>             MailScanner mailing list
>             mailscanner at lists.mailscanner.info
>             <mailto:mailscanner at lists.mailscanner.info>
>             http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
>
>
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x271
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>
>
>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170822/405d54c3/attachment-0001.html>

From kevin.miller at juneau.org  Wed Aug 23 00:09:05 2017
From: kevin.miller at juneau.org (Kevin Miller)
Date: Wed, 23 Aug 2017 00:09:05 +0000
Subject: v5.0.6 Released
In-Reply-To: <1b5bcf14-a426-6ed5-4023-517c74db6c55@pztop.com>
References: <06a301d31aa0$1538a640$3fa9f2c0$@mailborder.com>
 <CAMk2VrTj9bTxzm+HGZurRshyHAywccbM3ZOnPzE1k6-FU-01jQ@mail.gmail.com>
 <CAMk2VrQ+UX=Mx4oxyXY7fRJSg8KyOmo0SnWhXQo2cZVLkrFMSA@mail.gmail.com>
 <CAMk2VrReLCKWpL79oFNKTECvM=ZfgKx+Z5nkeT1Jj72K5ejvBA@mail.gmail.com>
 <06e401d31b0c$9bbda190$d338e4b0$@mailborder.com>
 <4f51c49c-0743-02c8-8d65-4c2a60f97650@pztop.com>
 <CABu_8zJ5vdoaUDwxu8H2A0RTYNo9Ja7OgTFWJ-W+si4a+yzwkw@mail.gmail.com>
 <761357483.207939.1503435108495.JavaMail.zimbra@vdb.nl>
 <1b5bcf14-a426-6ed5-4023-517c74db6c55@pztop.com>
Message-ID: <76ef0e5a76f74c0da51a94f99ebf0474@City-Exch-DB2.cbj.local>

You can ?migrate? the Bayes database.  You may have to momentarily stop MailScanner on the production server so there?s no locks on the files, but if you copy them to  the new server it will be more than happy to use them.   Be sure to start up the production server again! ?

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357

From: MailScanner [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] On Behalf Of Gao
Sent: Tuesday, August 22, 2017 4:00 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: v5.0.6 Released

Hi,

I can't afford to stop the production server. The backup MX sounds like a great idea. I'll try it to test the new release.

Another question: How can I migrate the learned Bayes databases to the testing system? May I just copy these files(bayes_journal, bayes.mutex,, bayes_seen, bayes_toks)over to the new system?
Gao

On 2017-08-22 01:51 PM, Thom van der Boon wrote:
The way I do is to route the domain with the least ammount of traffic throu the new mailscanner and keep the rest via the old server. Test everything, solve any problem and when you are satisfied move domains from the old server to the new server graduately

OR

In DNS set the new MailScanner server as a backup MX. Much spam senders preference backup MX servers, so it is quite a good playground to catch anything which goes throu your backup MX, when you are happy with the tests stop the primary MX for a short time..... everything will go throu the backup MX and you can restore the old situation in seconds simply by starting the old server

OR a combination of both scenarios

Met vriendelijke groet, Best regards,


Thom van der Boon
E-Mail: thom at vdb.nl<mailto:thom at vdb.nl>



=====



Thom.H. van der Boon b.v.
Transito 4
6909 DA  Babberich
Tel.: +31 (0)88 4272727
Fax: +31 (0)88 4272789
Home Page: http://www.vdb.nl/

________________________________
Van: "Shawn Iverson" <iversons at rushville.k12.in.us><mailto:iversons at rushville.k12.in.us>
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info><mailto:mailscanner at lists.mailscanner.info>
Verzonden: Dinsdag 22 augustus 2017 21:50:48
Onderwerp: Re: v5.0.6 Released

Gao,

You can set up a test system the same as your original (with a different ip address and latest software versions, of course).  Just make sure the test system doesn't deliver to the same destination, otherwise you will start seeing double (emails, that is).

Duplicating email to a system is not something that you normally do.  It may be possible somehow in postfix with live mail.  I wouldn't want to tinker with my production system like that, though.

What I have done before is temporarily stop MailScanner on the production system just long enough to let some mail queue up in the HOLD queue, make a copy, then start MailScanner again.  You can then literally drop them into the same HOLD queue on the test environment and watch it churn through them.


On Tue, Aug 22, 2017 at 12:30 PM, Gao <gao at pztop.com<mailto:gao at pztop.com>> wrote:
Hi,

I'd like to test the new version and what is the best way to setup a test system? My production system is CentOS7+Postfix+MailScanner. I plan to build another system to test. How can I duplicate all the incoming email to my test system?

Thanks

Gao
On 2017-08-21 11:04 PM, Jerry Benton wrote:
Wasn?t me this time. It was all Shawn Iverson.

Yes. Download and run install.sh.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605<tel:%28843%29%20800-8605>
+44 (020) 3883-8605<tel:+44%2020%203883%208605>



From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Nerk Nerk
Sent: Tuesday, August 22, 2017 1:48 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info><mailto:mailscanner at lists.mailscanner.info>
Subject: Re: v5.0.6 Released

Great work Jerry!

What is the normal way to update... Just Download and run install.sh?

Op 21 aug. 2017 19:08 schreef "Jerry Benton" <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>>:
The new version has been published here:
https://www.mailscanner.info/downloads/



--
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 (843) 800-8605<tel:%2B1%20%20%20%28843%29%20800-8605>
+44 (020) 3883-8605<tel:%2B44%20%28020%29%203883-8605>





--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner








--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[Image removed by sender.][Image removed by sender.]



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner








-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/7efda4a6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ~WRD000.jpg
Type: image/jpeg
Size: 823 bytes
Desc: ~WRD000.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/7efda4a6/attachment.jpg>

From thom at vdb.nl  Wed Aug 23 04:46:28 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Wed, 23 Aug 2017 06:46:28 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <5750ea18-f43e-f9be-517b-56c1d722afab@mtl.mit.edu>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
 <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
 <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>
 <5750ea18-f43e-f9be-517b-56c1d722afab@mtl.mit.edu>
Message-ID: <75553495.208628.1503463588709.JavaMail.zimbra@vdb.nl>

Hi all, 

Attached a new version of the ms-phising-script for testing 

What has changed: 


    * Serious typo in the restart Mailscanner part 
    * If one of the two custom files is changed, the script will regenerate the file and if configured restart mailscanner 
    * Added support for restarting MailScanner on systemd systems 
    * And various minor other enhancements 

Any feedback is highly appriciated 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Thomas Lohman" <thomasl at mtl.mit.edu> 
Aan: mailscanner at lists.mailscanner.info 
Verzonden: Dinsdag 22 augustus 2017 19:06:16 
Onderwerp: Re: Phishing Server Change 



Hi Thom, 

I've attached a patch based off the copy of the script downloaded from the site that seems to be working for me. It should update the bad/safe conf files if either the date of the master or the custom file is newer than the conf file date. 
hopefully it is useful. 


--tom 


On 08/22/2017 10:44 AM, Thom van der Boon wrote: 



Hi Tom, 

It does not. Will incorporate that in the next version. 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Thomas Lohman" <thomasl at mtl.mit.edu> 
Aan: mailscanner at lists.mailscanner.info 
Verzonden: Dinsdag 22 augustus 2017 16:41:59 
Onderwerp: Re: Phishing Server Change 

Hi, 

how does the script deal with the use case where the master has not 
changed on the remote site (thus no new copy is downloaded) but the 
custom file has changed since the last run? It looks like the changes 
to the custom file will not be merged into the 
phishing.safe.sites.conf/phishing.bad.sites.conf file unless 
safe_updated/bad_updated has been set to 1. 

thanks, 


--tom 




-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 








-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/2ee31349/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ms-update-phishing
Type: application/x-shellscript
Size: 13919 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/2ee31349/attachment.bin>

From iversons at rushville.k12.in.us  Wed Aug 23 12:41:30 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 23 Aug 2017 08:41:30 -0400
Subject: Phishing Server Change
In-Reply-To: <75553495.208628.1503463588709.JavaMail.zimbra@vdb.nl>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
 <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
 <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>
 <5750ea18-f43e-f9be-517b-56c1d722afab@mtl.mit.edu>
 <75553495.208628.1503463588709.JavaMail.zimbra@vdb.nl>
Message-ID: <CABu_8z+Va-dgSJ7rv4TJAEXK+VnCDBeu7TPf8o0PPuDRkoTxfw@mail.gmail.com>

Script in place here.

I will do some further testing on different platforms and versions.

On Wed, Aug 23, 2017 at 12:46 AM, Thom van der Boon <thom at vdb.nl> wrote:

> Hi all,
>
> Attached a new version of the ms-phising-script for testing
>
> What has changed:
>
>    - Serious typo in the restart Mailscanner part
>    - If one of the two custom files is changed, the script will
>    regenerate the file and if configured restart mailscanner
>    - Added support for restarting MailScanner on systemd systems
>    - And various minor other enhancements
>
> Any feedback is highly appriciated
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA  Babberich
> Tel.: +31 (0)88 4272727 <+31%2088%20427%202727>
> Fax: +31 (0)88 4272789 <+31%2088%20427%202789>
> Home Page: http://www.vdb.nl/
>
> ------------------------------
> *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Dinsdag 22 augustus 2017 19:06:16
> *Onderwerp: *Re: Phishing Server Change
>
> Hi Thom,
>
> I've attached a patch based off the copy of the script downloaded from the
> site that seems to be working for me.  It should update the bad/safe conf
> files if either the date of the master or the custom file is newer than the
> conf file date.
> hopefully it is useful.
>
>
> --tom
>
>
> On 08/22/2017 10:44 AM, Thom van der Boon wrote:
>
> Hi Tom,
>
> It does not. Will incorporate that in the next version.
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA  Babberich
> Tel.: +31 (0)88 4272727
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------
> *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu> <thomasl at mtl.mit.edu>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Dinsdag 22 augustus 2017 16:41:59
> *Onderwerp: *Re: Phishing Server Change
>
> Hi,
>
> how does the script deal with the use case where the master has not
> changed on the remote site (thus no new copy is downloaded) but the
> custom file has changed since the last run?  It looks like the changes
> to the custom file will not be merged into the
> phishing.safe.sites.conf/phishing.bad.sites.conf file unless
> safe_updated/bad_updated has been set to 1.
>
> thanks,
>
>
> --tom
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/d92cc7de/attachment.html>

From thomasl at mtl.mit.edu  Wed Aug 23 15:40:59 2017
From: thomasl at mtl.mit.edu (Thomas Lohman)
Date: Wed, 23 Aug 2017 11:40:59 -0400
Subject: Phishing Server Change
In-Reply-To: <75553495.208628.1503463588709.JavaMail.zimbra@vdb.nl>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
 <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
 <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>
 <5750ea18-f43e-f9be-517b-56c1d722afab@mtl.mit.edu>
 <75553495.208628.1503463588709.JavaMail.zimbra@vdb.nl>
Message-ID: <c09bfd41-de2c-629c-df7d-af2d6395618b@mtl.mit.edu>

Hi Thom,

Thanks for the quick updates.  It is working for me.  I've attached a 
patch against v0.2.0 with a few more site changes that may be of 
interest to be incorporated in some manner into the project's script.

(1) Made the systemd service name settable at the top of the script in 
case anyone has a different name for whatever reason.

(2) Added logic to determine what the syslog facility name should be set 
to based on the MailScanner configuration files and changed 'mail' to 
$SYSLOG throughout the script.

(3) Added additional logging if the either file downloaded is possibly 
corrupt.  Related to this, if the wget/curl combo fail for whatever 
reason, I remove whatever may have been downloaded and log an error.  
The script no longer exits and continues after setting a "got an error" 
variable to 1.  As currently written, the script should drop down and 
get a another error when it sees that there is no bad/safe master file.  
At that point, the {bad/safe}_updated boolean is set back to 0.   At the 
very end, exit returns whatever "got an error" is set to.  I made these 
changes since I wanted to be alerted if the file downloaded is possibly 
corrupted but also wanted to give the script a chance to process the 
safe sites even if the bad sites file had problems.

Anyhow, if you find any of this useful then feel free to incorporate the 
changes in some manner.

cheers,


--tom


On 08/23/2017 12:46 AM, Thom van der Boon wrote:
> Hi all,
>
> Attached a new version of the ms-phising-script for testing
>
> What has changed:
>
>   * Serious typo in the restart Mailscanner part
>   * If one of the two custom files is changed, the script will
>     regenerate the file and if configured restart mailscanner
>   * Added support for restarting MailScanner on systemd systems
>   * And various minor other enhancements
>
> Any feedback is highly appriciated
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA Babberich
> Tel.: +31 (0)88 4272727
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------------------------------------------------
> *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Dinsdag 22 augustus 2017 19:06:16
> *Onderwerp: *Re: Phishing Server Change
>
> Hi Thom,
>
> I've attached a patch based off the copy of the script downloaded from 
> the site that seems to be working for me. It should update the 
> bad/safe conf files if either the date of the master or the custom 
> file is newer than the conf file date.
>
> hopefully it is useful.
>
>
> --tom
>
>
> On 08/22/2017 10:44 AM, Thom van der Boon wrote:
>
>     Hi Tom,
>
>     It does not. Will incorporate that in the next version.
>
>     Met vriendelijke groet, Best regards,
>
>
>     Thom van der Boon
>     E-Mail: thom at vdb.nl
>
>
>
>     =====
>
>
>
>     Thom.H. van der Boon b.v.
>     Transito 4
>     6909 DA Babberich
>     Tel.: +31 (0)88 4272727
>     Fax: +31 (0)88 4272789
>     Home Page: http://www.vdb.nl/
>
>     ------------------------------------------------------------------------
>     *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu>
>     *Aan: *mailscanner at lists.mailscanner.info
>     *Verzonden: *Dinsdag 22 augustus 2017 16:41:59
>     *Onderwerp: *Re: Phishing Server Change
>
>     Hi,
>
>     how does the script deal with the use case where the master has not
>     changed on the remote site (thus no new copy is downloaded) but the
>     custom file has changed since the last run?  It looks like the
>     changes
>     to the custom file will not be merged into the
>     phishing.safe.sites.conf/phishing.bad.sites.conf file unless
>     safe_updated/bad_updated has been set to 1.
>
>     thanks,
>
>
>     --tom
>
>
>
>
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/499e9447/attachment.html>
-------------- next part --------------
--- ms-update-phishing-v0.2.0	2017-08-23 10:44:37.032965012 -0400
+++ ms-update-phishing	2017-08-23 11:24:46.687940476 -0400
@@ -28,6 +28,7 @@
 BADURL='http://phishing.mailscanner.info/phishing.bad.sites.conf';
 SAFEURL='http://phishing.mailscanner.info/phishing.safe.sites.conf';
 MSSTARTSCRIPT='/etc/init.d/mailscanner';
+MSSERVICENAME='mailscanner.service';
 
 PATH=/bin:/usr/bin:/sbin:/usr/sbin:/usr/etc:/usr/local/bin:/usr/sfw/bin
 export PATH
@@ -41,11 +42,32 @@
     exit 1
 fi
 
+ms_conf_files=( $(ls conf.d/.) )
+for conf_file in ${ms_conf_files[*]}
+do
+  if [ "${conf_file}" != "README" ]; then
+    SYSLOG=`/usr/sbin/ms-peek SyslogFacility conf.d/${conf_file}`
+    if [ "$SYSLOG" != "" ]; then
+      break
+    fi
+  fi
+done
+
+if [ "$SYSLOG" == "" ]; then
+  SYSLOG=`/usr/sbin/ms-peek SyslogFacility MailScanner.conf`
+fi
+
+if [ "$SYSLOG" == "" ]; then
+  SYSLOG="mail"
+fi
+
 # Load MailScanner Defaults
 if [ -f $CONFIGDIR/defaults ] ; then
   . $CONFIGDIR/defaults
 fi
 
+gotAnError=0
+
 if [ -z "$ms_cron_ps_restart" ]; then 
   echo 'ms_cron_ps_restart not found in defaults. Adding....'
   echo '' >> $CONFIGDIR/defaults
@@ -88,7 +110,7 @@
     #echo 'Found wget'
     CURLORWGET='wget';
   else
-    logger -p mail.warn -t update.bad.phishing.sites Cannot find wget or curl, update failed. ; echo Cannot find wget or curl to do phishing sites update. ; exit 1
+    logger -p $SYSLOG.warn -t update.bad.phishing.sites Cannot find wget or curl, update failed. ; echo Cannot find wget or curl to do phishing sites update. ; exit 1
   fi
 fi
 
@@ -109,6 +131,8 @@
         else
           #echo Check phishing.bad.sites.conf.master failed: It looks corrupt
           rm -f $CONFIGDIR/phishing.bad.sites.conf.master
+          logger -p $SYSLOG.warn -t update.bad.phishing.sites Downloaded bad phishing site master file is corrupt, update failed. ; echo "Downloaded bad phishing site master file is corrupt, removing it." ;
+          gotAnError=1
         fi
       else
         #echo Remote phishing.bad.sites.conf.master not newer than local copy.... everything OK
@@ -122,14 +146,15 @@
       else
         #echo Check phishing.bad.sites.conf.master failed: It looks corrupt
         rm -f $CONFIGDIR/phishing.bad.sites.conf.master
+        logger -p $SYSLOG.warn -t update.bad.phishing.sites Downloaded bad phishing site master file is corrupt, update failed. ; echo "Downloaded bad phishing site master file is corrupt, removing it." ;
+        gotAnError=1
       fi
     fi
   else
-    logger -p mail.warn -t update.bad.phishing.sites Updating using curl failed, trying wget. ; echo Updating using curl failed, trying wget. ; CURLORWGET = 'wget';
+    logger -p $SYSLOG.warn -t update.bad.phishing.sites Updating using curl failed, trying wget. ; echo Updating using curl failed, trying wget. ; CURLORWGET = 'wget';
   fi
 fi
 
-
 if [ $CURLORWGET = 'wget' ]; then
   echo Trying wget....
   wget -q --user-agent="msv5 Update Script v0.2.0" --no-check-certificate -N $BADURL.master
@@ -144,6 +169,8 @@
         else
           #echo Check phishing.bad.sites.conf.master failed: It looks corrupt
           rm -f $CONFIGDIR/phishing.bad.sites.conf.master
+          logger -p $SYSLOG.warn -t update.bad.phishing.sites Downloaded bad phishing site master file is corrupt, removing it. ; echo "Downloaded bad phishing site master file is corrupt, removing it." ;
+          gotAnError=1
         fi
       else
         #echo Remote phishing.bad.sites.conf.master not newer than local copy.... everything OK
@@ -157,10 +184,14 @@
       else
         #echo Check phishing.bad.sites.conf.master failed: It looks corrupt
         rm -f $CONFIGDIR/phishing.bad.sites.conf.master
+        logger -p $SYSLOG.warn -t update.bad.phishing.sites Downloaded bad phishing site master file is corrupt, removing it. ; echo "Downloaded bad phishing site master file is corrupt, removing it." ;
+        gotAnError=1
       fi
     fi
   else
-    logger -p mail.warn -t update.bad.phishing.sites Updating using curl and wget failed. ; echo Updating using curl and wget failed. ; exit 1;
+    rm -f $CONFIGDIR/phishing.bad.sites.conf.master
+    logger -p $SYSLOG.warn -t update.bad.phishing.sites The curl/wget download of the bad phishing site master file failed. Removing whatever was downloaded.; echo The curl/wget download of the bad phishing site master file failed. Removing whatever was downloaded.;
+    gotAnError=1
   fi
 fi
 
@@ -179,9 +210,11 @@
     mv -f phishing.bad.sites.conf.new phishing.bad.sites.conf
     chmod a+r phishing.bad.sites.conf
     #echo Creation of fresh phishing.bad.sites.conf is OK
-    logger -p mail.info -t update.bad.phishing.sites Phishing bad sites list updated
+    logger -p $SYSLOG.info -t update.bad.phishing.sites Phishing bad sites list updated
   else
-    logger -p mail.info -t update.bad.phishing.sites Phishing bad sites list update failed!
+    logger -p $SYSLOG.info -t update.bad.phishing.sites The phishing bad sites master file does not exist or is not readable. Update failed! ; echo "The phishing bad sites master file does not exist or is not readable. Update failed!" ;
+    gotAnError=1
+    bad_updated=0
   fi
 fi
 
@@ -202,6 +235,8 @@
         else
           #echo Check phishing.safe.sites.conf.master failed: It looks corrupt
           rm -f $CONFIGDIR/phishing.safe.sites.conf.master
+          logger -p $SYSLOG.warn -t update.safe.phishing.sites Downloaded safe phishing site master file is corrupt, update failed. ; echo "Downloaded safe phishing site master file is corrupt, removing it." ;
+          gotAnError=1
         fi
       else
         #echo Remote phishing.safe.sites.conf.master not newer than local copy.... everything OK
@@ -215,10 +250,12 @@
       else
         #echo Check phishing.safe.sites.conf.master failed: It looks corrupt
         rm -f $CONFIGDIR/phishing.safe.sites.conf.master
+        logger -p $SYSLOG.warn -t update.safe.phishing.sites Downloaded safe phishing site master file is corrupt, update failed. ; echo "Downloaded safe phishing site master file is corrupt, removing it." ;
+        gotAnError=1
       fi
     fi
   else
-    logger -p mail.warn -t update.safe.phishing.sites Updating using curl failed, trying wget. ; echo Updating using curl failed, trying wget. ; CURLORWGET = 'wget';
+    logger -p $SYSLOG.warn -t update.safe.phishing.sites Updating using curl failed, trying wget. ; echo Updating using curl failed, trying wget. ; CURLORWGET = 'wget';
   fi
 fi
 
@@ -236,6 +273,7 @@
         else
           #echo Check phishing.safe.sites.conf.master failed: It looks corrupt
           rm -f $CONFIGDIR/phishing.safe.sites.conf.master
+          logger -p $SYSLOG.warn -t update.safe.phishing.sites Downloaded safe phishing site master file is corrupt, removing it. ; echo "Downloaded safe phishing site master file is corrupt, removing it." ;
         fi
       else
         #echo Remote phishing.safe.sites.conf.master not newer than local copy.... everything OK
@@ -249,10 +287,14 @@
       else
         #echo Check phishing.safe.sites.conf.master failed: It looks corrupt
         rm -f $CONFIGDIR/phishing.safe.sites.conf.master
+        logger -p $SYSLOG.warn -t update.safe.phishing.sites Downloaded safe phishing site master file is corrupt, removing it. ; echo "Downloaded safe phishing site master file is corrupt, removing it." ;
+        gotAnError=1
       fi
     fi
   else
-    logger -p mail.warn -t update.safe.phishing.sites Updating using curl and wget failed. ; echo Updating using curl and wget failed. ; exit 1;
+    rm -f $CONFIGDIR/phishing.safe.sites.conf.master
+    logger -p $SYSLOG.warn -t update.safe.phishing.sites The curl/wget download of the safe phishing site master file failed. Removing whatever was downloaded.; echo The curl/wget download of the safe phishing site master file failed. Removing whatever was downloaded.;
+    gotAnError=1
   fi
 fi
 
@@ -271,9 +313,11 @@
     mv -f phishing.safe.sites.conf.new phishing.safe.sites.conf
     chmod a+r phishing.safe.sites.conf
     #echo Creation of fresh phishing.safe.sites.conf is OK
-    logger -p mail.info -t update.safe.phishing.sites Phishing safe sites list updated
+    logger -p $SYSLOG.info -t update.safe.phishing.sites Phishing safe sites list updated
   else
-    logger -p mail.info -t update.safe.phishing.sites Phishing safe sites list update failed!
+    logger -p $SYSLOG.info -t update.safe.phishing.sites The phishing safe sites master file does not exist or is not readable. Update failed! ; echo "The phishing safe sites master file does not exist or is not readable. Update failed!" ;
+    gotAnError=1
+    safe_updated=0
   fi
 fi
  
@@ -283,19 +327,19 @@
 if [ $updated -ge 1 ]; then
   if [ "$ms_cron_ps_restart" = "1" ]; then
     if [ ! -f /var/lock/subsys/MailScanner.off ]; then
-      logger -p mail.info -t ms-update-phishing reload MailScanner....
+      logger -p $SYSLOG.info -t ms-update-phishing reload MailScanner....
       if [ -d /etc/systemd ]; then
-        systemctl reload mailscanner.service > /dev/null 2>&1
+        systemctl reload $MSSERVICENAME > /dev/null 2>&1
         if [ $? != 0 ] ; then
           #echo "MailScanner reload failed - Retrying..."
-          systemctl reload mailscanner.service > /dev/null 2>&1
+          systemctl reload $MSSERVICENAME > /dev/null 2>&1
           if [ $? != 0 ] ; then
             #echo "Stopping MailScanner..."
-            systemctl stop mailscanner.service
+            systemctl stop $MSSERVICENAME
             #echo "Waiting for a minute..."
             perl -e "sleep 60;"
             #echo "Attemping to start MailScanner..."
-            systemctl start mailscanner.service
+            systemctl start $MSSERVICENAME
           fi
         fi
       else
@@ -319,4 +363,4 @@
   fi
 fi
 
-exit 0
+exit ${gotAnError}

From saifurcse at gmail.com  Wed Aug 23 16:44:23 2017
From: saifurcse at gmail.com (saifur rahman)
Date: Wed, 23 Aug 2017 22:44:23 +0600
Subject: How can I blocked Java Script File By the MailScanner
Message-ID: <CANNFxEJhFkq490n6MXB-oJhW2BapXp44YxLYQ1C-cY-e4eRELg@mail.gmail.com>

Dear Sir,

    How can I blocked Java Script File By the MailScanner?  Please Help me.

-- 
*With Regards**,*
Md. Sayfur Rahman ( RHCE, MCSE, CCNA, HP-UX)
System Administrator
Spark Systems Limited
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/2189eeba/attachment.html>

From mark at meelhuysen.com  Wed Aug 23 21:51:02 2017
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Wed, 23 Aug 2017 21:51:02 +0000
Subject: New MailScanner Stable v5.0.6-3 install
Message-ID: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>

Hi All,

I have for quite some time a 4.84.6 install running with SpammAssassin, ClamAV, Postgrey and Postfix on CentOs 6.9.

Now I have installed a CentOs 7 minimal installation with MailScanner 5.0.6-3, Spamassassin, ClamAv and Postfix.
Ran through the config and everything seems fine.
MailScanner -lint output:

[root at localhost ~]# MailScanner -lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 1500 hostnames from the phishing whitelist
Read 12886 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (5.0.6) is correct.

Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to  (89)
MailScanner setting UID to  (89)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error, python traceback seen in response
SpamAssassin reported no errors.
Auto: Found virus scanners: clamav
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamav
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
./1/eicar.com: Eicar-Test-Signature FOUND

Virus Scanning: ClamAV found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"

If any of your virus scanners (clamav)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.

The only problem I have is that MailScanner is not grabbing in when a new mail is held by Postfix. It also seems the service does not exist:

[root at localhost ~]# systemctl status MailScanner
Unit MailScanner.service could not be found.

I have installed another server for testing and there the service is recognized and started. I have no clue if I missed an error when installing MailScanner.
Btw SElinus is disabled.

Hope some can give me a push in the right direction. Thank you in advance!

With kind regards,

Mark


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/63c154d2/attachment.html>

From jorgeaaq at gmail.com  Wed Aug 23 22:25:58 2017
From: jorgeaaq at gmail.com (Jorge Arenas)
Date: Wed, 23 Aug 2017 17:25:58 -0500
Subject: New MailScanner Stable v5.0.6-3 install
In-Reply-To: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>
References: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>
Message-ID: <599e00f7.0bb7ca0a.e17a4.0582@mx.google.com>

This  is a problem with permissions of home directory of pyzor

Locate home directory of pyzor and change permissions to mtagroup ( if you follow Mr Benton recommendations ) or directly to postfix user

Saludos

Atte
Jorge A Arenas Quezada
CSA Consultores

Enviado desde mi tel?fono con Windows 10

From: Mark Meelhuysen
Sent: Wednesday, August 23, 2017 4:51 PM
To: MailScanner Discussion
Subject: New MailScanner Stable v5.0.6-3 install

Hi All,

I have for quite some time a 4.84.6 install running with SpammAssassin, ClamAV, Postgrey and Postfix on CentOs 6.9.

Now I have installed a CentOs 7 minimal installation with MailScanner 5.0.6-3, Spamassassin, ClamAv and Postfix.
Ran through the config and everything seems fine.
MailScanner ?lint output:

[root at localhost ~]# MailScanner -lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 1500 hostnames from the phishing whitelist
Read 12886 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (5.0.6) is correct.

Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to? (89)
MailScanner setting UID to? (89)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error, python traceback seen in response
SpamAssassin reported no errors.
Auto: Found virus scanners: clamav
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamav
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
./1/eicar.com: Eicar-Test-Signature FOUND

Virus Scanning: ClamAV found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"

If any of your virus scanners (clamav)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.

The only problem I have is that MailScanner is not grabbing in when a new mail is held by Postfix. It also seems the service does not exist:

[root at localhost ~]# systemctl status MailScanner
Unit MailScanner.service could not be found.

I have installed another server for testing and there the service is recognized and started. I have no clue if I missed an error when installing MailScanner.
Btw SElinus is disabled.

Hope some can give me a push in the right direction. Thank you in advance!

With kind regards,

Mark


-- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. 
Meelhuysen IT Solutions. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/bbc7855e/attachment.html>

From iversons at rushville.k12.in.us  Wed Aug 23 22:48:30 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 23 Aug 2017 18:48:30 -0400
Subject: New MailScanner Stable v5.0.6-3 install
In-Reply-To: <599e00f7.0bb7ca0a.e17a4.0582@mx.google.com>
References: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>
 <599e00f7.0bb7ca0a.e17a4.0582@mx.google.com>
Message-ID: <CABu_8zLyj8yc4m3CvPiJC-TQdEVbQ_BYyhs7TYevGFhm9g8CDw@mail.gmail.com>

Try "systemctl status mailscanner"  (lowercase)



On Wed, Aug 23, 2017 at 6:25 PM, Jorge Arenas <jorgeaaq at gmail.com> wrote:

> This  is a problem with permissions of home directory of pyzor
>
>
>
> Locate home directory of pyzor and change permissions to mtagroup ( if you
> follow Mr Benton recommendations ) or directly to postfix user
>
>
>
> Saludos
>
>
>
> Atte
> Jorge A Arenas Quezada
> CSA Consultores
>
> Enviado desde mi tel?fono con Windows 10
>
>
>
> *From: *Mark Meelhuysen <mark at meelhuysen.com>
> *Sent: *Wednesday, August 23, 2017 4:51 PM
> *To: *MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject: *New MailScanner Stable v5.0.6-3 install
>
>
>
> Hi All,
>
>
>
> I have for quite some time a 4.84.6 install running with SpammAssassin,
> ClamAV, Postgrey and Postfix on CentOs 6.9.
>
>
>
> Now I have installed a CentOs 7 minimal installation with MailScanner
> 5.0.6-3, Spamassassin, ClamAv and Postfix.
>
> Ran through the config and everything seems fine.
>
> MailScanner ?lint output:
>
>
>
> [root at localhost ~]# MailScanner -lint
>
> Trying to setlogsock(unix)
>
>
>
> Reading configuration file /etc/MailScanner/MailScanner.conf
>
> Reading configuration file /etc/MailScanner/conf.d/README
>
> Read 1500 hostnames from the phishing whitelist
>
> Read 12886 hostnames from the phishing blacklists
>
>
>
> Checking version numbers...
>
> Version number in MailScanner.conf (5.0.6) is correct.
>
>
>
> Your envelope_sender_header in spamassassin.conf is correct.
>
> MailScanner setting GID to  (89)
>
> MailScanner setting UID to  (89)
>
>
>
> Checking for SpamAssassin errors (if you use it)...
>
> Using SpamAssassin results cache
>
> Connected to SpamAssassin cache database
>
> pyzor: check failed: internal error, python traceback seen in response
>
> SpamAssassin reported no errors.
>
> Auto: Found virus scanners: clamav
>
> Connected to Processing Attempts Database
>
> Created Processing Attempts Database successfully
>
> There are 0 messages in the Processing Attempts Database
>
> Using locktype = posix
>
> MailScanner.conf says "Virus Scanners = auto"
>
> Found these virus scanners installed: clamav
>
> ============================================================
> ===============
>
> Filename Checks: Windows/DOS Executable (1 eicar.com)
>
> Other Checks: Found 1 problems
>
> Virus and Content Scanning: Starting
>
> ./1/eicar.com: Eicar-Test-Signature FOUND
>
>
>
> Virus Scanning: ClamAV found 2 infections
>
> Infected message 1 came from 10.1.1.1
>
> Virus Scanning: Found 2 viruses
>
> ============================================================
> ===============
>
> Virus Scanner test reports:
>
> ClamAV said "eicar.com contains Eicar-Test-Signature"
>
>
>
> If any of your virus scanners (clamav)
>
> are not listed there, you should check that they are installed correctly
>
> and that MailScanner is finding them correctly via its virus.scanners.conf.
>
>
>
> The only problem I have is that MailScanner is not grabbing in when a new
> mail is held by Postfix. It also seems the service does not exist:
>
>
>
> [root at localhost ~]# systemctl status MailScanner
>
> Unit MailScanner.service could not be found.
>
>
>
> I have installed another server for testing and there the service is
> recognized and started. I have no clue if I missed an error when installing
> MailScanner.
>
> Btw SElinus is disabled.
>
>
>
> Hope some can give me a push in the right direction. Thank you in advance!
>
>
>
> With kind regards,
>
>
>
> Mark
>
>
>
>
> --
> Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt
> schoon te zijn.
> Meelhuysen IT Solutions <http://www.meelhuysen.com/>.
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/183f2702/attachment.html>

From jorgeaaq at gmail.com  Wed Aug 23 23:52:10 2017
From: jorgeaaq at gmail.com (Jorge Arenas)
Date: Wed, 23 Aug 2017 18:52:10 -0500
Subject: New MailScanner Stable v5.0.6-3 install
In-Reply-To: <CABu_8zLyj8yc4m3CvPiJC-TQdEVbQ_BYyhs7TYevGFhm9g8CDw@mail.gmail.com>
References: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>
 <599e00f7.0bb7ca0a.e17a4.0582@mx.google.com>
 <CABu_8zLyj8yc4m3CvPiJC-TQdEVbQ_BYyhs7TYevGFhm9g8CDw@mail.gmail.com>
Message-ID: <599e152b.023fca0a.6dcb6.f260@mx.google.com>

Sorry 

I was reading the mail in traffic

My contribution was only regarding the pyzor error 

About your other problem Shawn advise will help


Atte
Jorge A Arenas Quezada
CSA Consultores

Enviado desde mi tel?fono con Windows 10

From: Shawn Iverson
Sent: Wednesday, August 23, 2017 5:49 PM
To: MailScanner Discussion
Subject: Re: New MailScanner Stable v5.0.6-3 install

Try "systemctl status mailscanner" ?(lowercase)



On Wed, Aug 23, 2017 at 6:25 PM, Jorge Arenas <jorgeaaq at gmail.com> wrote:
This? is a problem with permissions of home directory of pyzor
?
Locate home directory of pyzor and change permissions to mtagroup ( if you follow Mr Benton recommendations ) or directly to postfix user
?
Saludos
?
Atte
Jorge A Arenas Quezada
CSA Consultores

Enviado desde mi tel?fono con Windows 10
?
From: Mark Meelhuysen
Sent: Wednesday, August 23, 2017 4:51 PM
To: MailScanner Discussion
Subject: New MailScanner Stable v5.0.6-3 install
?
Hi All,
?
I have for quite some time a 4.84.6 install running with SpammAssassin, ClamAV, Postgrey and Postfix on CentOs 6.9.
?
Now I have installed a CentOs 7 minimal installation with MailScanner 5.0.6-3, Spamassassin, ClamAv and Postfix.
Ran through the config and everything seems fine.
MailScanner ?lint output:
?
[root at localhost ~]# MailScanner -lint
Trying to setlogsock(unix)
?
Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 1500 hostnames from the phishing whitelist
Read 12886 hostnames from the phishing blacklists
?
Checking version numbers...
Version number in MailScanner.conf (5.0.6) is correct.
?
Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to? (89)
MailScanner setting UID to? (89)
?
Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error, python traceback seen in response
SpamAssassin reported no errors.
Auto: Found virus scanners: clamav
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamav
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
./1/eicar.com: Eicar-Test-Signature FOUND
?
Virus Scanning: ClamAV found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"
?
If any of your virus scanners (clamav)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
?
The only problem I have is that MailScanner is not grabbing in when a new mail is held by Postfix. It also seems the service does not exist:
?
[root at localhost ~]# systemctl status MailScanner
Unit MailScanner.service could not be found.
?
I have installed another server for testing and there the service is recognized and started. I have no clue if I missed an error when installing MailScanner.
Btw SElinus is disabled.
?
Hope some can give me a push in the right direction. Thank you in advance!
?
With kind regards,
?
Mark
?

-- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. 
Meelhuysen IT Solutions. 
?



--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner





-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170823/78cbc241/attachment-0001.html>

From thom at vdb.nl  Thu Aug 24 03:12:36 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Thu, 24 Aug 2017 05:12:36 +0200 (CEST)
Subject: New MailScanner Stable v5.0.6-3 install
In-Reply-To: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>
References: <7b6a995e5d6d42d7b6b72d78a9b2979a@DC01.meelhuysen.com>
Message-ID: <757725025.219156.1503544356956.JavaMail.zimbra@vdb.nl>

Marc, 

I had the same on CentOS 6.9. It is not an MailScanner thing, it is an spamassassin thing 

In the file /etc/MailScanner/spamassassin.conf locate the following: 

# make sure pyzor is installed before enabling 
#ifplugin Mail::SpamAssassin::Plugin::Pyzor 
# pyzor_path /usr/bin/pyzor 
#endif 

And change it to 

# make sure pyzor is installed before enabling 
ifplugin Mail::SpamAssassin::Plugin::Pyzor 
pyzor_path /usr/bin/pyzor 
pyzor_options --homedir /etc/mail/spamassassin 
endif 

And set the correct ownership and permissions 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Mark Meelhuysen" <mark at meelhuysen.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Woensdag 23 augustus 2017 23:51:02 
Onderwerp: New MailScanner Stable v5.0.6-3 install 



Hi All, 



I have for quite some time a 4.84.6 install running with SpammAssassin, ClamAV, Postgrey and Postfix on CentOs 6.9. 



Now I have installed a CentOs 7 minimal installation with MailScanner 5.0.6-3, Spamassassin, ClamAv and Postfix. 

Ran through the config and everything seems fine. 

MailScanner ?lint output: 



[root at localhost ~]# MailScanner -lint 

Trying to setlogsock(unix) 



Reading configuration file /etc/MailScanner/MailScanner.conf 

Reading configuration file /etc/MailScanner/conf.d/README 

Read 1500 hostnames from the phishing whitelist 

Read 12886 hostnames from the phishing blacklists 



Checking version numbers... 

Version number in MailScanner.conf (5.0.6) is correct. 



Your envelope_sender_header in spamassassin.conf is correct. 

MailScanner setting GID to (89) 

MailScanner setting UID to (89) 



Checking for SpamAssassin errors (if you use it)... 

Using SpamAssassin results cache 

Connected to SpamAssassin cache database 

pyzor: check failed: internal error, python traceback seen in response 

SpamAssassin reported no errors. 

Auto: Found virus scanners: clamav 

Connected to Processing Attempts Database 

Created Processing Attempts Database successfully 

There are 0 messages in the Processing Attempts Database 

Using locktype = posix 

MailScanner.conf says "Virus Scanners = auto" 

Found these virus scanners installed: clamav 

=========================================================================== 

Filename Checks: Windows/DOS Executable (1 eicar.com) 

Other Checks: Found 1 problems 

Virus and Content Scanning: Starting 

./1/eicar.com: Eicar-Test-Signature FOUND 



Virus Scanning: ClamAV found 2 infections 

Infected message 1 came from 10.1.1.1 

Virus Scanning: Found 2 viruses 

=========================================================================== 

Virus Scanner test reports: 

ClamAV said "eicar.com contains Eicar-Test-Signature" 



If any of your virus scanners (clamav) 

are not listed there, you should check that they are installed correctly 

and that MailScanner is finding them correctly via its virus.scanners.conf. 



The only problem I have is that MailScanner is not grabbing in when a new mail is held by Postfix. It also seems the service does not exist: 



[root at localhost ~]# systemctl status MailScanner 

Unit MailScanner.service could not be found. 



I have installed another server for testing and there the service is recognized and started. I have no clue if I missed an error when installing MailScanner. 

Btw SElinus is disabled. 



Hope some can give me a push in the right direction. Thank you in advance! 



With kind regards, 



Mark 



-- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn. 
Meelhuysen IT Solutions . 


-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170824/bafd7f9c/attachment.html>

From mark at meelhuysen.com  Thu Aug 24 07:39:29 2017
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Thu, 24 Aug 2017 07:39:29 +0000
Subject: New MailScanner Stable v5.0.6-3 install
Message-ID: <fc15d53bc2e546ce82df358f04c936a2@DC01.meelhuysen.com>

Hi Jorge, Shawn and Tom!

Thank you for your input! This solution solved my error regarding Pyzor indeed.
But my MailScanner is still not jumpin in. My maillog shows : localhost MailScanner[2209]: MailScanner Email Processor version 5.0.6 starting...
And my testmessages are still in the postfix queue.
The service btw is running. I was still using MailScanner instead of mailscanner. Also postfix and spamassassin are running.

Thank you for your assistance...

Mark

Van: Mark Meelhuysen
Verzonden: woensdag 23 augustus 2017 23:51
Aan: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Onderwerp: New MailScanner Stable v5.0.6-3 install

Hi All,

I have for quite some time a 4.84.6 install running with SpammAssassin, ClamAV, Postgrey and Postfix on CentOs 6.9.

Now I have installed a CentOs 7 minimal installation with MailScanner 5.0.6-3, Spamassassin, ClamAv and Postfix.
Ran through the config and everything seems fine.
MailScanner -lint output:

[root at localhost ~]# MailScanner -lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 1500 hostnames from the phishing whitelist
Read 12886 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (5.0.6) is correct.

Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to  (89)
MailScanner setting UID to  (89)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error, python traceback seen in response
SpamAssassin reported no errors.
Auto: Found virus scanners: clamav
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamav
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
./1/eicar.com: Eicar-Test-Signature FOUND

Virus Scanning: ClamAV found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"

If any of your virus scanners (clamav)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.

The only problem I have is that MailScanner is not grabbing in when a new mail is held by Postfix. It also seems the service does not exist:

[root at localhost ~]# systemctl status MailScanner
Unit MailScanner.service could not be found.

I have installed another server for testing and there the service is recognized and started. I have no clue if I missed an error when installing MailScanner.
Btw SElinus is disabled.

Hope some can give me a push in the right direction. Thank you in advance!

With kind regards,

Mark


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170824/f8e0da66/attachment.html>

From mark at meelhuysen.com  Thu Aug 24 07:43:05 2017
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Thu, 24 Aug 2017 07:43:05 +0000
Subject: New MailScanner Stable v5.0.6-3 install
In-Reply-To: <fc15d53bc2e546ce82df358f04c936a2@DC01.meelhuysen.com>
References: <fc15d53bc2e546ce82df358f04c936a2@DC01.meelhuysen.com>
Message-ID: <d9d53b15b8bf45deb0514dd5e9577595@DC01.meelhuysen.com>

Hi All!

Forget my previous question! My mistake is even so stupid I am not going to tell you guys :)

Mark

Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Mark Meelhuysen
Verzonden: donderdag 24 augustus 2017 09:39
Aan: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Onderwerp: RE: New MailScanner Stable v5.0.6-3 install

Hi Jorge, Shawn and Tom!

Thank you for your input! This solution solved my error regarding Pyzor indeed.
But my MailScanner is still not jumpin in. My maillog shows : localhost MailScanner[2209]: MailScanner Email Processor version 5.0.6 starting...
And my testmessages are still in the postfix queue.
The service btw is running. I was still using MailScanner instead of mailscanner. Also postfix and spamassassin are running.

Thank you for your assistance...

Mark

Van: Mark Meelhuysen
Verzonden: woensdag 23 augustus 2017 23:51
Aan: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Onderwerp: New MailScanner Stable v5.0.6-3 install

Hi All,

I have for quite some time a 4.84.6 install running with SpammAssassin, ClamAV, Postgrey and Postfix on CentOs 6.9.

Now I have installed a CentOs 7 minimal installation with MailScanner 5.0.6-3, Spamassassin, ClamAv and Postfix.
Ran through the config and everything seems fine.
MailScanner -lint output:

[root at localhost ~]# MailScanner -lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 1500 hostnames from the phishing whitelist
Read 12886 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (5.0.6) is correct.

Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to  (89)
MailScanner setting UID to  (89)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error, python traceback seen in response
SpamAssassin reported no errors.
Auto: Found virus scanners: clamav
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamav
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
./1/eicar.com: Eicar-Test-Signature FOUND

Virus Scanning: ClamAV found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"

If any of your virus scanners (clamav)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.

The only problem I have is that MailScanner is not grabbing in when a new mail is held by Postfix. It also seems the service does not exist:

[root at localhost ~]# systemctl status MailScanner
Unit MailScanner.service could not be found.

I have installed another server for testing and there the service is recognized and started. I have no clue if I missed an error when installing MailScanner.
Btw SElinus is disabled.

Hope some can give me a push in the right direction. Thank you in advance!

With kind regards,

Mark


--
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.
Meelhuysen IT Solutions<http://www.meelhuysen.com/>.

-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170824/969ada4c/attachment.html>

From q at snj.ca  Thu Aug 24 21:50:36 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Thu, 24 Aug 2017 21:50:36 +0000
Subject: MailScanner Ignoring All Emails
Message-ID: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>

I have searched and searched, and I cannot find an answer for this.  Everything is working on the server.  It is running Sendmail, and configured to relay to our Exchange Server using mailertable.  It works - mail from the outside gets received by Sendmail and forwarded to our Exchange Server, and visa versa.

What is not happening, is MailScanner is not scanning anything.  There is no indication in the logs (pasted below - this is from an internal test, but if an email comes from the outside, it behaves the same way) that MailScanner is doing anything.

I have followed the instructions on getting it working with Sendmail on CentOS 7, including creating the mqueue.in folder, and adjusting the startup scripts....

Any help here would be greatly appreciated.

Thanks so much!


Quintin



Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email Processor version 5.0.6 starting...
Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file /etc/MailScanner/MailScanner.conf
Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file /etc/MailScanner/conf.d/README
Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from the phishing whitelist
Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from the phishing blacklists
Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results cache
Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin cache database
Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin auto-whitelist functionality...
Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus scanners: clamav
Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing Attempts Database
Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the Processing Attempts Database
Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7): queueing at 00:15:00
Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7): queueing at 01:00:00
Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root, size=305, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>, relay=root at localhost
Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: from=<root at mailscanner.snjlaw.local>, size=454, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>, proto=ESMTP, daemon=Daemon0, relay=localhost [127.0.0.1]
Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client, relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL, cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca>, ctladdr=<root at mailscanner.snjlaw.local> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4], dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for delivery)
Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (v7OLmtdG003081 Message accepted for delivery)




________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170824/3210c32f/attachment.html>

From Antony.Stone at mailscanner.open.source.it  Fri Aug 25 08:23:25 2017
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Fri, 25 Aug 2017 10:23:25 +0200
Subject: MailScanner Ignoring All Emails
In-Reply-To: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
Message-ID: <201708251023.25740.Antony.Stone@mailscanner.open.source.it>

On Thursday 24 August 2017 at 23:50:36, Quintin S. Giesbrecht wrote:

> Everything is working on the server.  It is running Sendmail, and
> configured to relay to our Exchange Server using mailertable.

> What is not happening, is MailScanner is not scanning anything.

> I have followed the instructions

Which ones?

> on getting it working with Sendmail on CentOS 7, including creating the
> mqueue.in folder, and adjusting the startup scripts.

Please show us those scripts.


Antony.

-- 
Normal people think "If it ain't broke, don't fix it".
Engineers think "If it ain't broke, it doesn't have enough features yet".

                                                   Please reply to the list;
                                                         please *don't* CC me.

From maxsec at gmail.com  Fri Aug 25 08:23:39 2017
From: maxsec at gmail.com (Martin Hepworth)
Date: Fri, 25 Aug 2017 08:23:39 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
Message-ID: <CAGDKorJoKOsRF-iEmSU-Bb=w_RGxA3zdFk9wz50hUYftV4WSnw@mail.gmail.com>

So you've followed this and restarted both sendmail instances?

https://www.mailscanner.info/sendmail/

On Fri, 25 Aug 2017 at 09:01, Quintin S. Giesbrecht <q at snj.ca> wrote:

> I have searched and searched, and I cannot find an answer for this.
> Everything is working on the server.  It is running Sendmail, and
> configured to relay to our Exchange Server using mailertable.  It works ?
> mail from the outside gets received by Sendmail and forwarded to our
> Exchange Server, and visa versa.
>
>
>
> What is not happening, is MailScanner is not scanning anything.  There is
> no indication in the logs (pasted below ? this is from an internal test,
> but if an email comes from the outside, it behaves the same way) that
> MailScanner is doing anything.
>
>
>
> I have followed the instructions on getting it working with Sendmail on
> CentOS 7, including creating the mqueue.in folder, and adjusting the
> startup scripts?.
>
>
>
> Any help here would be greatly appreciated.
>
>
>
> Thanks so much!
>
>
>
>
>
> Quintin
>
>
>
>
>
>
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email Processor
> version 5.0.6 starting...
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
> /etc/MailScanner/conf.d/README
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from
> the phishing whitelist
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from
> the phishing blacklists
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results
> cache
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin
> cache database
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin
> auto-whitelist functionality...
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus scanners:
> clamav
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing
> Attempts Database
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the
> Processing Attempts Database
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
>
> Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7):
> queueing at 00:15:00
>
> Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
>
> Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7):
> queueing at 01:00:00
>
> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root,
> size=305, class=0, nrcpts=1,
> msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>,
> relay=root at localhost
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081:
> from=<root at mailscanner.snjlaw.local>, size=454, class=0, nrcpts=1,
> msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>, proto=ESMTP,
> daemon=Daemon0, relay=localhost [127.0.0.1]
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client,
> relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL,
> cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca>,
> ctladdr=<root at mailscanner.snjlaw.local> (0/0), delay=00:00:00,
> xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4],
> dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local>
> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for
> delivery)
>
> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca,
> ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay,
> pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
> (v7OLmtdG003081 Message accepted for delivery)
>
>
>
>
>
>
>
> ------------------------------
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> --
-- 
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/c41bbc16/attachment.html>

From iversons at rushville.k12.in.us  Fri Aug 25 11:18:25 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 07:18:25 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
Message-ID: <CABu_8zL_7PfEeqTmiroJ+xeZ9CrROswztqRX6baWiewhVFryPw@mail.gmail.com>

MailScanner, starting with version 5.0.6-3, ships with a MailScanner
specific sendmail script for Red Hat based distributions.

In the case of CentOS 7...

Disable these:
systemctl disable sendmail
systemctl disable sm-client
systemctl stop sendmail
systemctl stop sm-client

systemctl enable ms-sendmail
systemctl start ms-sendmail

On Thu, Aug 24, 2017 at 5:50 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:

> I have searched and searched, and I cannot find an answer for this.
> Everything is working on the server.  It is running Sendmail, and
> configured to relay to our Exchange Server using mailertable.  It works ?
> mail from the outside gets received by Sendmail and forwarded to our
> Exchange Server, and visa versa.
>
>
>
> What is not happening, is MailScanner is not scanning anything.  There is
> no indication in the logs (pasted below ? this is from an internal test,
> but if an email comes from the outside, it behaves the same way) that
> MailScanner is doing anything.
>
>
>
> I have followed the instructions on getting it working with Sendmail on
> CentOS 7, including creating the mqueue.in folder, and adjusting the
> startup scripts?.
>
>
>
> Any help here would be greatly appreciated.
>
>
>
> Thanks so much!
>
>
>
>
>
> Quintin
>
>
>
>
>
>
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email Processor
> version 5.0.6 starting...
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
> /etc/MailScanner/conf.d/README
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from
> the phishing whitelist
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from
> the phishing blacklists
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results
> cache
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin
> cache database
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin
> auto-whitelist functionality...
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus scanners:
> clamav
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing
> Attempts Database
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the
> Processing Attempts Database
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
>
> Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7):
> queueing at 00:15:00
>
> Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
>
> Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7):
> queueing at 01:00:00
>
> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root,
> size=305, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>,
> relay=root at localhost
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081:
> from=<root at mailscanner.snjlaw.local>, size=454, class=0, nrcpts=1,
> msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>, proto=ESMTP,
> daemon=Daemon0, relay=localhost [127.0.0.1]
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client,
> relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL,
> cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca>,
> ctladdr=<root at mailscanner.snjlaw.local> (0/0), delay=00:00:00,
> xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4],
> dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local>
> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for
> delivery)
>
> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca,
> ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay,
> pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
> (v7OLmtdG003081 Message accepted for delivery)
>
>
>
>
>
>
>
> ------------------------------
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/91355cbe/attachment.html>

From iversons at rushville.k12.in.us  Fri Aug 25 12:47:44 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 08:47:44 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8zL_7PfEeqTmiroJ+xeZ9CrROswztqRX6baWiewhVFryPw@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8zL_7PfEeqTmiroJ+xeZ9CrROswztqRX6baWiewhVFryPw@mail.gmail.com>
Message-ID: <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>

(corrected ordering)

In the case of CentOS 7...

Disable these:
systemctl stop sendmail
systemctl stop sm-client
systemctl disable sendmail
systemctl disable sm-client


systemctl enable ms-sendmail
systemctl start ms-sendmail

On Fri, Aug 25, 2017 at 7:18 AM, Shawn Iverson <iversons at rushville.k12.in.us
> wrote:

> MailScanner, starting with version 5.0.6-3, ships with a MailScanner
> specific sendmail script for Red Hat based distributions.
>
> In the case of CentOS 7...
>
> Disable these:
> systemctl disable sendmail
> systemctl disable sm-client
> systemctl stop sendmail
> systemctl stop sm-client
>
> systemctl enable ms-sendmail
> systemctl start ms-sendmail
>
> On Thu, Aug 24, 2017 at 5:50 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
>> I have searched and searched, and I cannot find an answer for this.
>> Everything is working on the server.  It is running Sendmail, and
>> configured to relay to our Exchange Server using mailertable.  It works ?
>> mail from the outside gets received by Sendmail and forwarded to our
>> Exchange Server, and visa versa.
>>
>>
>>
>> What is not happening, is MailScanner is not scanning anything.  There is
>> no indication in the logs (pasted below ? this is from an internal test,
>> but if an email comes from the outside, it behaves the same way) that
>> MailScanner is doing anything.
>>
>>
>>
>> I have followed the instructions on getting it working with Sendmail on
>> CentOS 7, including creating the mqueue.in folder, and adjusting the
>> startup scripts?.
>>
>>
>>
>> Any help here would be greatly appreciated.
>>
>>
>>
>> Thanks so much!
>>
>>
>>
>>
>>
>> Quintin
>>
>>
>>
>>
>>
>>
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email
>> Processor version 5.0.6 starting...
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
>> /etc/MailScanner/MailScanner.conf
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
>> /etc/MailScanner/conf.d/README
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from
>> the phishing whitelist
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from
>> the phishing blacklists
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results
>> cache
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin
>> cache database
>>
>> Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin
>> auto-whitelist functionality...
>>
>> Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus
>> scanners: clamav
>>
>> Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing
>> Attempts Database
>>
>> Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the
>> Processing Attempts Database
>>
>> Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
>>
>> Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7):
>> queueing at 00:15:00
>>
>> Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
>>
>> Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7):
>> queueing at 01:00:00
>>
>> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root,
>> size=305, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>,
>> relay=root at localhost
>>
>> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081:
>> from=<root at mailscanner.snjlaw.local>, size=454, class=0, nrcpts=1,
>> msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>, proto=ESMTP,
>> daemon=Daemon0, relay=localhost [127.0.0.1]
>>
>> Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client,
>> relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL,
>> cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
>>
>> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca>,
>> ctladdr=<root at mailscanner.snjlaw.local> (0/0), delay=00:00:00,
>> xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4],
>> dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local>
>> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for
>> delivery)
>>
>> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca,
>> ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay,
>> pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
>> (v7OLmtdG003081 Message accepted for delivery)
>>
>>
>>
>>
>>
>>
>>
>> ------------------------------
>> This communication, including its attachments, if any, is confidential
>> and intended only for the person(s) to whom it is addressed, and may
>> contain proprietary and/or privileged material. Any unauthorized review,
>> disclosure, copying, other distribution of this communication or taking of
>> any action in reliance on its contents is strictly prohibited. If you have
>> received this message in error, please notify SNJ immediately so that we
>> may amend our records. Then, please delete this message, and its
>> attachments, if any, without reading, copying or forwarding it to anyone.
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>>
>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x271 <(765)%20932-3901>
> iversons at rushville.k12.in.us
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/ecc26f17/attachment.html>

From q at snj.ca  Fri Aug 25 13:14:25 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 13:14:25 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <201708251023.25740.Antony.Stone@mailscanner.open.source.it>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <201708251023.25740.Antony.Stone@mailscanner.open.source.it>
Message-ID: <b494bdedfb124e3c9fcdebc296f54941@HONDA.snjlaw.local>

Followed the same instructions that Shawn Iverson sent in reply to this...listed below. From my understanding, the ms-sendmail script is a MailScanner specific script to start sendmail.  In any case, I have done this, to no avail...

Thanks.


systemctl stop sendmail
systemctl stop sm-client
systemctl disable sendmail
systemctl disable sm-client


systemctl enable ms-sendmail
systemctl start ms-sendmail


Quintin


-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 3:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

On Thursday 24 August 2017 at 23:50:36, Quintin S. Giesbrecht wrote:

> Everything is working on the server.  It is running Sendmail, and
> configured to relay to our Exchange Server using mailertable.

> What is not happening, is MailScanner is not scanning anything.

> I have followed the instructions

Which ones?

> on getting it working with Sendmail on CentOS 7, including creating
> the mqueue.in folder, and adjusting the startup scripts.

Please show us those scripts.


Antony.

--
Normal people think "If it ain't broke, don't fix it".
Engineers think "If it ain't broke, it doesn't have enough features yet".

                                                   Please reply to the list;
                                                         please *don't* CC me.


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.

From q at snj.ca  Fri Aug 25 13:14:38 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 13:14:38 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CAGDKorJoKOsRF-iEmSU-Bb=w_RGxA3zdFk9wz50hUYftV4WSnw@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CAGDKorJoKOsRF-iEmSU-Bb=w_RGxA3zdFk9wz50hUYftV4WSnw@mail.gmail.com>
Message-ID: <80f47b7cecf248c4819a3c42bf38920d@HONDA.snjlaw.local>

Yes.

Thanks

From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: Friday, August 25, 2017 3:24 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

So you've followed this and restarted both sendmail instances?

https://www.mailscanner.info/sendmail/

On Fri, 25 Aug 2017 at 09:01, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
I have searched and searched, and I cannot find an answer for this.  Everything is working on the server.  It is running Sendmail, and configured to relay to our Exchange Server using mailertable.  It works ? mail from the outside gets received by Sendmail and forwarded to our Exchange Server, and visa versa.

What is not happening, is MailScanner is not scanning anything.  There is no indication in the logs (pasted below ? this is from an internal test, but if an email comes from the outside, it behaves the same way) that MailScanner is doing anything.

I have followed the instructions on getting it working with Sendmail on CentOS 7, including creating the mqueue.in<http://mqueue.in> folder, and adjusting the startup scripts?.

Any help here would be greatly appreciated.

Thanks so much!


Quintin



Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email Processor version 5.0.6 starting...
Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file /etc/MailScanner/MailScanner.conf
Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file /etc/MailScanner/conf.d/README
Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from the phishing whitelist
Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from the phishing blacklists
Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results cache
Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin cache database
Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin auto-whitelist functionality...
Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus scanners: clamav
Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing Attempts Database
Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the Processing Attempts Database
Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7): queueing at 00:15:00
Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7): queueing at 01:00:00
Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root, size=305, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local<mailto:20170824214855.GA3077 at mailscanner.snjlaw.local>>, relay=root at localhost
Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: from=<root at mailscanner.snjlaw.local<mailto:root at mailscanner.snjlaw.local>>, size=454, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local<mailto:20170824214855.GA3077 at mailscanner.snjlaw.local>>, proto=ESMTP, daemon=Daemon0, relay=localhost [127.0.0.1]
Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client, relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL, cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca<mailto:q at snj.ca>>, ctladdr=<root at mailscanner.snjlaw.local<mailto:root at mailscanner.snjlaw.local>> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4], dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local<mailto:20170824214855.GA3077 at mailscanner.snjlaw.local>> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for delivery)
Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca<mailto:q at snj.ca>, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (v7OLmtdG003081 Message accepted for delivery)




________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner
--
--
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/7b8065a5/attachment.html>

From q at snj.ca  Fri Aug 25 13:16:48 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 13:16:48 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8zL_7PfEeqTmiroJ+xeZ9CrROswztqRX6baWiewhVFryPw@mail.gmail.com>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
Message-ID: <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>

I did that, from the instructions at the end of the MS install?also confirmed that the directories have the correct permissions.  Mail is flowing, so I assume that the queue folders are correct, MS is just not jumping in?and it is running ?

[root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue runner at 00:15:00 for /var/spool/mqueue
root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting connections
smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue runner at 01:00:00 for /var/spool/clientmqueue

[root at mailscanner MailWatch-1.2.5]# ps -ef|grep MailScanner
root      2681     1  0 Aug24 ?        00:00:00 MailScanner: master process sleeping
root      2682  2681  0 Aug24 ?        00:00:05 MailScanner: waiting for messages
root      2741  2681  0 Aug24 ?        00:00:04 MailScanner: waiting for messages
root      2764  2681  0 Aug24 ?        00:00:04 MailScanner: waiting for messages
root      2793  2681  0 Aug24 ?        00:00:04 MailScanner: waiting for messages
root      2816  2681  0 Aug24 ?        00:00:04 MailScanner: waiting for messages

Thanks,

Quintin

From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 7:48 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

(corrected ordering)

In the case of CentOS 7...

Disable these:
systemctl stop sendmail
systemctl stop sm-client
systemctl disable sendmail
systemctl disable sm-client


systemctl enable ms-sendmail
systemctl start ms-sendmail

On Fri, Aug 25, 2017 at 7:18 AM, Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
MailScanner, starting with version 5.0.6-3, ships with a MailScanner specific sendmail script for Red Hat based distributions.

In the case of CentOS 7...

Disable these:
systemctl disable sendmail
systemctl disable sm-client
systemctl stop sendmail
systemctl stop sm-client

systemctl enable ms-sendmail
systemctl start ms-sendmail

On Thu, Aug 24, 2017 at 5:50 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
I have searched and searched, and I cannot find an answer for this.  Everything is working on the server.  It is running Sendmail, and configured to relay to our Exchange Server using mailertable.  It works ? mail from the outside gets received by Sendmail and forwarded to our Exchange Server, and visa versa.

What is not happening, is MailScanner is not scanning anything.  There is no indication in the logs (pasted below ? this is from an internal test, but if an email comes from the outside, it behaves the same way) that MailScanner is doing anything.

I have followed the instructions on getting it working with Sendmail on CentOS 7, including creating the mqueue.in<http://mqueue.in> folder, and adjusting the startup scripts?.

Any help here would be greatly appreciated.

Thanks so much!


Quintin



Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email Processor version 5.0.6 starting...
Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file /etc/MailScanner/MailScanner.conf
Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file /etc/MailScanner/conf.d/README
Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from the phishing whitelist
Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from the phishing blacklists
Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results cache
Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin cache database
Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin auto-whitelist functionality...
Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus scanners: clamav
Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing Attempts Database
Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the Processing Attempts Database
Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7): queueing at 00:15:00
Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7): queueing at 01:00:00
Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root, size=305, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local<mailto:20170824214855.GA3077 at mailscanner.snjlaw.local>>, relay=root at localhost
Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: from=<root at mailscanner.snjlaw.local<mailto:root at mailscanner.snjlaw.local>>, size=454, class=0, nrcpts=1, msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local<mailto:20170824214855.GA3077 at mailscanner.snjlaw.local>>, proto=ESMTP, daemon=Daemon0, relay=localhost [127.0.0.1]
Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client, relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL, cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca<mailto:q at snj.ca>>, ctladdr=<root at mailscanner.snjlaw.local<mailto:root at mailscanner.snjlaw.local>> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4], dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local<mailto:20170824214855.GA3077 at mailscanner.snjlaw.local>> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for delivery)
Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca<mailto:q at snj.ca>, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (v7OLmtdG003081 Message accepted for delivery)




________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/2b67826d/attachment.html>

From Antony.Stone at mailscanner.open.source.it  Fri Aug 25 13:22:41 2017
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Fri, 25 Aug 2017 15:22:41 +0200
Subject: MailScanner Ignoring All Emails
In-Reply-To: <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
Message-ID: <201708251522.41307.Antony.Stone@mailscanner.open.source.it>

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just not
> jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being 
correct).

If your listener process is putting received mail into the folder being 
monitored by the queue runner process, for example, MailScanner will be 
sitting waiting for emails to appear in another folder altogether, and mail 
will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, 
with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

-- 
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.

From q at snj.ca  Fri Aug 25 16:00:20 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 16:00:20 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
Message-ID: <16a76529de1945fb935f790cfe81f96c@HONDA.snjlaw.local>

1. I don't know either, that was what was created when I ran systemctl enable ms-sendmail

2. I don't know...again, that was created when ms-sendmail was enabled.

Q

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 8:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just
> not jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being correct).

If your listener process is putting received mail into the folder being monitored by the queue runner process, for example, MailScanner will be sitting waiting for emails to appear in another folder altogether, and mail will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

--
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.

From q at snj.ca  Fri Aug 25 16:03:45 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 16:03:45 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
Message-ID: <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>

Here are the scripts from /etc/systemd/system.... that systemctl enable ms-sendmail created - hopefully that makes sense...:

[root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
[Unit]
Description=Sendmail Mail Transport Client for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail-in.service ms-sendmail-out.service
BindsTo=ms-sendmail-in.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sm-client.pid
Environment=SENDMAIL_OPTS=-q1h
ExecStartPre=/bin/touch /run/sm-client.pid
ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
ExecStartPre=-/sbin/restorecon /run/sm-client.pid
ExecStartPre=-/etc/mail/make
ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS

[Install]
WantedBy=multi-user.target
Also=ms-sendmail-in.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
[Unit]
Description=Sendmail Mail Transport Inbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-out.service
BindsTo=ms-sendmail.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sendmail.in.pid
ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in -OPidFile=/run/sendmail.in.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
[Unit]
Description=Sendmail Mail Transport Outbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-in.service
BindsTo=ms-sendmail.service ms-sendmail-in.service

[Service]
Type=forking
PIDFile=/run/sendmail.out.pid
ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-in.service



-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 8:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just
> not jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being correct).

If your listener process is putting received mail into the folder being monitored by the queue runner process, for example, MailScanner will be sitting waiting for emails to appear in another folder altogether, and mail will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

--
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.

From iversons at rushville.k12.in.us  Fri Aug 25 16:13:15 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 12:13:15 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
Message-ID: <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>

Something doesn't jive here...from your earlier thread...

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

These are not the ones started by ms-sendmail.

It should be watching /var/spool/mqueue.in, not /var/spool/mqueue...

You don't have a rogue init scirpt, do you?



On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:

> Here are the scripts from /etc/systemd/system.... that systemctl enable
> ms-sendmail created - hopefully that makes sense...:
>
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
> [Unit]
> Description=Sendmail Mail Transport Client for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail-in.service ms-sendmail-out.service
> BindsTo=ms-sendmail-in.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sm-client.pid
> Environment=SENDMAIL_OPTS=-q1h
> ExecStartPre=/bin/touch /run/sm-client.pid
> ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
> ExecStartPre=-/sbin/restorecon /run/sm-client.pid
> ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail-in.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit]
> Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-out.service
> BindsTo=ms-sendmail.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.in.pid
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit]
> Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-in.service
> BindsTo=ms-sendmail.service ms-sendmail-in.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.out.pid
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
> Sent: Friday, August 25, 2017 8:23 AM
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner Ignoring All Emails
>
> On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:
>
> > I did that, from the instructions at the end of the MS install?also
> > confirmed that the directories have the correct permissions.  Mail is
> > flowing, so I assume that the queue folders are correct, MS is just
> > not jumping in?and it is running ?
>
> That doesn't sound like a good assumption to me (about the queue folders
> being correct).
>
> If your listener process is putting received mail into the folder being
> monitored by the queue runner process, for example, MailScanner will be
> sitting waiting for emails to appear in another folder altogether, and mail
> will simply be delivered by the queue runner as soon as it's received.
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
> 1. I'm not sure I understand why you have two queue runner processes
> going, with different timings and monitoring different directories.
>
> 2. Which directory is the middle process (PID 17994) delivering into?
>
>
> Antony.
>
> --
> All generalisations are inaccurate.
>
>                                                    Please reply to the
> list;
>                                                          please *don't* CC
> me.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
> ________________________________
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/256f78af/attachment.html>

From iversons at rushville.k12.in.us  Fri Aug 25 16:20:05 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 12:20:05 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
Message-ID: <CABu_8z+ygQXoaG817EW85cFf-DWyh+Ksb8s-LfYCXm-6JK1RYg@mail.gmail.com>

Wait, that could be right....

mqueue.in belongs to the second process.



On Fri, Aug 25, 2017 at 12:13 PM, Shawn Iverson <
iversons at rushville.k12.in.us> wrote:

> Something doesn't jive here...from your earlier thread...
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
> These are not the ones started by ms-sendmail.
>
> It should be watching /var/spool/mqueue.in, not /var/spool/mqueue...
>
> You don't have a rogue init scirpt, do you?
>
>
>
> On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
>> Here are the scripts from /etc/systemd/system.... that systemctl enable
>> ms-sendmail created - hopefully that makes sense...:
>>
>> [root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
>> [Unit]
>> Description=Sendmail Mail Transport Client for MailScanner
>> After=syslog.target network.target
>> Conflicts=postfix.service exim.service sendmail.service sm-client.service
>> Wants=ms-sendmail-in.service ms-sendmail-out.service
>> BindsTo=ms-sendmail-in.service ms-sendmail-out.service
>>
>> [Service]
>> Type=forking
>> PIDFile=/run/sm-client.pid
>> Environment=SENDMAIL_OPTS=-q1h
>> ExecStartPre=/bin/touch /run/sm-client.pid
>> ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
>> ExecStartPre=-/sbin/restorecon /run/sm-client.pid
>> ExecStartPre=-/etc/mail/make
>> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>>
>> [Install]
>> WantedBy=multi-user.target
>> Also=ms-sendmail-in.service ms-sendmail-out.service
>> [root at mailscanner multi-user.target.wants]#
>> [root at mailscanner multi-user.target.wants]#
>> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
>> [Unit]
>> Description=Sendmail Mail Transport Inbound Agent for MailScanner
>> After=syslog.target network.target
>> Conflicts=postfix.service exim.service sendmail.service sm-client.service
>> Wants=ms-sendmail.service ms-sendmail-out.service
>> BindsTo=ms-sendmail.service ms-sendmail-out.service
>>
>> [Service]
>> Type=forking
>> PIDFile=/run/sendmail.in.pid
>> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
>> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
>> -OPidFile=/run/sendmail.in.pid
>>
>> [Install]
>> WantedBy=multi-user.target
>> Also=ms-sendmail.service ms-sendmail-out.service
>> [root at mailscanner multi-user.target.wants]#
>> [root at mailscanner multi-user.target.wants]#
>> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
>> [Unit]
>> Description=Sendmail Mail Transport Outbound Agent for MailScanner
>> After=syslog.target network.target
>> Conflicts=postfix.service exim.service sendmail.service sm-client.service
>> Wants=ms-sendmail.service ms-sendmail-in.service
>> BindsTo=ms-sendmail.service ms-sendmail-in.service
>>
>> [Service]
>> Type=forking
>> PIDFile=/run/sendmail.out.pid
>> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>>
>> [Install]
>> WantedBy=multi-user.target
>> Also=ms-sendmail.service ms-sendmail-in.service
>>
>>
>>
>> -----Original Message-----
>> From: MailScanner [mailto:mailscanner-bounces+q=
>> snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
>> Sent: Friday, August 25, 2017 8:23 AM
>> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
>> Subject: Re: MailScanner Ignoring All Emails
>>
>> On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:
>>
>> > I did that, from the instructions at the end of the MS install?also
>> > confirmed that the directories have the correct permissions.  Mail is
>> > flowing, so I assume that the queue folders are correct, MS is just
>> > not jumping in?and it is running ?
>>
>> That doesn't sound like a good assumption to me (about the queue folders
>> being correct).
>>
>> If your listener process is putting received mail into the folder being
>> monitored by the queue runner process, for example, MailScanner will be
>> sitting waiting for emails to appear in another folder altogether, and mail
>> will simply be delivered by the queue runner as soon as it's received.
>>
>> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
>> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
>> > runner at 00:15:00 for /var/spool/mqueue
>>
>> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
>> > connections
>>
>> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
>> > runner at 01:00:00 for /var/spool/clientmqueue
>>
>> 1. I'm not sure I understand why you have two queue runner processes
>> going, with different timings and monitoring different directories.
>>
>> 2. Which directory is the middle process (PID 17994) delivering into?
>>
>>
>> Antony.
>>
>> --
>> All generalisations are inaccurate.
>>
>>                                                    Please reply to the
>> list;
>>                                                          please *don't*
>> CC me.
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>> ________________________________
>> This communication, including its attachments, if any, is confidential
>> and intended only for the person(s) to whom it is addressed, and may
>> contain proprietary and/or privileged material. Any unauthorized review,
>> disclosure, copying, other distribution of this communication or taking of
>> any action in reliance on its contents is strictly prohibited. If you have
>> received this message in error, please notify SNJ immediately so that we
>> may amend our records. Then, please delete this message, and its
>> attachments, if any, without reading, copying or forwarding it to anyone.
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x271 <(765)%20932-3901>
> iversons at rushville.k12.in.us
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/b2f41a1b/attachment.html>

From q at snj.ca  Fri Aug 25 16:22:29 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 16:22:29 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
Message-ID: <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>

Here are the 3 ms-sendmail scripts


Ms-sendmail.service

[Service]

Type=forking

PIDFile=/run/sm-client.pid

Environment=SENDMAIL_OPTS=-q1h

ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon /run/sm-client.pid ExecStartPre=-/etc/mail/make ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS



[Install]

WantedBy=multi-user.target

Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service





Ms-sendmail-in.service

[Service]

Type=forking

PIDFile=/run/sendmail.in.pid

ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in -OPidFile=/run/sendmail.in.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service





Ms-sendmail-out.service

[Service]

Type=forking

PIDFile=/run/sendmail.out.pid

ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-in.service


From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:13 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

Something doesn't jive here...from your earlier thread...

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

These are not the ones started by ms-sendmail.

It should be watching /var/spool/mqueue.in<http://mqueue.in>, not /var/spool/mqueue...

You don't have a rogue init scirpt, do you?



On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the scripts from /etc/systemd/system.... that systemctl enable ms-sendmail created - hopefully that makes sense...:

[root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
[Unit]
Description=Sendmail Mail Transport Client for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail-in.service ms-sendmail-out.service
BindsTo=ms-sendmail-in.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sm-client.pid
Environment=SENDMAIL_OPTS=-q1h
ExecStartPre=/bin/touch /run/sm-client.pid
ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
ExecStartPre=-/sbin/restorecon /run/sm-client.pid
ExecStartPre=-/etc/mail/make
ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS

[Install]
WantedBy=multi-user.target
Also=ms-sendmail-in.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
[Unit]
Description=Sendmail Mail Transport Inbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-out.service
BindsTo=ms-sendmail.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sendmail.in.pid
ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
[Unit]
Description=Sendmail Mail Transport Outbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-in.service
BindsTo=ms-sendmail.service ms-sendmail-in.service

[Service]
Type=forking
PIDFile=/run/sendmail.out.pid
ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-in.service



-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 8:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just
> not jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being correct).

If your listener process is putting received mail into the folder being monitored by the queue runner process, for example, MailScanner will be sitting waiting for emails to appear in another folder altogether, and mail will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

--
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/fd31ea75/attachment.html>

From iversons at rushville.k12.in.us  Fri Aug 25 16:25:58 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 12:25:58 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
 <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
Message-ID: <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>

I'm going to spin up an instance on CentOS 7 with sendmail to help figure
this out with you.

On Fri, Aug 25, 2017 at 12:22 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:

> Here are the 3 ms-sendmail scripts
>
>
>
>
>
> *Ms-sendmail.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sm-client.pid
>
> Environment=SENDMAIL_OPTS=-q1h
>
> ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown
> smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon
> /run/sm-client.pid ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner
> multi-user.target.wants]# [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target Conflicts=postfix.service exim.service
> sendmail.service sm-client.service Wants=ms-sendmail.service
> ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service
>
>
>
>
>
> *Ms-sendmail-in.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sendmail.in.pid
>
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner
> multi-user.target.wants]# [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target Conflicts=postfix.service exim.service
> sendmail.service sm-client.service Wants=ms-sendmail.service
> ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service
>
>
>
>
>
> *Ms-sendmail-out.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sendmail.out.pid
>
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* Friday, August 25, 2017 11:13 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner Ignoring All Emails
>
>
>
> Something doesn't jive here...from your earlier thread...
>
>
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
>
>
> These are not the ones started by ms-sendmail.
>
>
>
> It should be watching /var/spool/mqueue.in, not /var/spool/mqueue...
>
>
>
> You don't have a rogue init scirpt, do you?
>
>
>
>
>
>
>
> On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
> Here are the scripts from /etc/systemd/system.... that systemctl enable
> ms-sendmail created - hopefully that makes sense...:
>
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
> [Unit]
> Description=Sendmail Mail Transport Client for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail-in.service ms-sendmail-out.service
> BindsTo=ms-sendmail-in.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sm-client.pid
> Environment=SENDMAIL_OPTS=-q1h
> ExecStartPre=/bin/touch /run/sm-client.pid
> ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
> ExecStartPre=-/sbin/restorecon /run/sm-client.pid
> ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail-in.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit]
> Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-out.service
> BindsTo=ms-sendmail.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.in.pid
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit]
> Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-in.service
> BindsTo=ms-sendmail.service ms-sendmail-in.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.out.pid
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
> Sent: Friday, August 25, 2017 8:23 AM
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner Ignoring All Emails
>
> On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:
>
> > I did that, from the instructions at the end of the MS install?also
> > confirmed that the directories have the correct permissions.  Mail is
> > flowing, so I assume that the queue folders are correct, MS is just
> > not jumping in?and it is running ?
>
> That doesn't sound like a good assumption to me (about the queue folders
> being correct).
>
> If your listener process is putting received mail into the folder being
> monitored by the queue runner process, for example, MailScanner will be
> sitting waiting for emails to appear in another folder altogether, and mail
> will simply be delivered by the queue runner as soon as it's received.
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
> 1. I'm not sure I understand why you have two queue runner processes
> going, with different timings and monitoring different directories.
>
> 2. Which directory is the middle process (PID 17994) delivering into?
>
>
> Antony.
>
> --
> All generalisations are inaccurate.
>
>                                                    Please reply to the
> list;
>                                                          please *don't* CC
> me.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
> ________________________________
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
> [image:
> https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][image:
> https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/5df43c63/attachment-0001.html>

From q at snj.ca  Fri Aug 25 16:27:43 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 16:27:43 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
 <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
 <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>
Message-ID: <02b949a87ace4c89b39f870a17b577a7@HONDA.snjlaw.local>

Thank you so much!

From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:26 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

I'm going to spin up an instance on CentOS 7 with sendmail to help figure this out with you.

On Fri, Aug 25, 2017 at 12:22 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the 3 ms-sendmail scripts


Ms-sendmail.service

[Service]

Type=forking

PIDFile=/run/sm-client.pid

Environment=SENDMAIL_OPTS=-q1h

ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon /run/sm-client.pid ExecStartPre=-/etc/mail/make ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS



[Install]

WantedBy=multi-user.target

Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service





Ms-sendmail-in.service

[Service]

Type=forking

PIDFile=/run/sendmail.in.pid

ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service





Ms-sendmail-out.service

[Service]

Type=forking

PIDFile=/run/sendmail.out.pid

ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-in.service


From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:13 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

Something doesn't jive here...from your earlier thread...

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

These are not the ones started by ms-sendmail.

It should be watching /var/spool/mqueue.in<http://mqueue.in>, not /var/spool/mqueue...

You don't have a rogue init scirpt, do you?



On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the scripts from /etc/systemd/system.... that systemctl enable ms-sendmail created - hopefully that makes sense...:

[root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
[Unit]
Description=Sendmail Mail Transport Client for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail-in.service ms-sendmail-out.service
BindsTo=ms-sendmail-in.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sm-client.pid
Environment=SENDMAIL_OPTS=-q1h
ExecStartPre=/bin/touch /run/sm-client.pid
ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
ExecStartPre=-/sbin/restorecon /run/sm-client.pid
ExecStartPre=-/etc/mail/make
ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS

[Install]
WantedBy=multi-user.target
Also=ms-sendmail-in.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
[Unit]
Description=Sendmail Mail Transport Inbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-out.service
BindsTo=ms-sendmail.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sendmail.in.pid
ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
[Unit]
Description=Sendmail Mail Transport Outbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-in.service
BindsTo=ms-sendmail.service ms-sendmail-in.service

[Service]
Type=forking
PIDFile=/run/sendmail.out.pid
ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-in.service



-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 8:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just
> not jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being correct).

If your listener process is putting received mail into the folder being monitored by the queue runner process, for example, MailScanner will be sitting waiting for emails to appear in another folder altogether, and mail will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

--
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/7dbaa3b8/attachment.html>

From iversons at rushville.k12.in.us  Fri Aug 25 18:50:16 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 14:50:16 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <02b949a87ace4c89b39f870a17b577a7@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
 <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
 <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>
 <02b949a87ace4c89b39f870a17b577a7@HONDA.snjlaw.local>
Message-ID: <CABu_8zKb0YAf0Q5MMf6B+T_bRN7jrWVJnsn5TCNPpaDbSekE1w@mail.gmail.com>

Ok, I have a MailScanner 5.0.6 with sendmail up, operational, and relaying,
and mail is correctly flowing through mailscanner.

Steps I took for testing:

1) Install CentOS 7 (I used a minimal install)
2) Install MailScanner 5.0.6 using install.sh with all defaults
3) Enable MailScanner (/etc/MailScanner/defaults)
4) Disable sendmail and sm-client (systemctl disable sendmail, systemctl
disable sm-client)
5) Enable ms-sendmail (systemctl enable ms-sendmail)
6) installed sendmail-cf and m4
7) edited /etc/mail/sendmail.mc to listen on all interfaces

DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl

8) built new cf

m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf

9) Added my domain/destination to the /etc/mail/mailertable

example.org   ESMTP:[x.x.x.x]

10) Built mailertable db

makemap hash /etc/mail/mailertable.db < /etc/mail/mailertable

11) Added domain to /etc/mail/relay-domains

example.org

12) Rebooted (was having issues with mailscanner starting, but reboot
cleared that up, probably self inflicted)

Sent an email to this system, and this is my log (edited).

Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: from=<
shawniverson at example.com>, size=2220, class=0, nrcpts=1,
msgid=<CACg3fsYxMmnMcuikD+7T-ya9Bcjwsreo8LsQ4OaRxyg3yapk2A at mail.example.orgm>,
proto=ESMTP, daemon=MTA, relay=mail-yw0-f177.google.com [x.x.x.x]
Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: to=<
shawniverson at example.org>, delay=00:00:00, mailer=esmtp, pri=32220,
stat=queued
Aug 25 14:37:36 relay MailScanner[2727]: New Batch: Scanning 1 messages,
2755 bytes
Aug 25 14:37:36 relay MailScanner[2727]: Virus and Content Scanning:
Starting
Aug 25 14:38:07 relay MailScanner[2727]: Uninfected: Delivered 1 messages
Aug 25 14:38:07 relay MailScanner[2727]: Deleted 1 messages from
processing-database
Aug 25 14:38:08 relay sendmail[3566]: v7PIbaMI003547: to=<
shawniverson at example.org>, delay=00:00:32, xdelay=00:00:01, mailer=esmtp,
pri=122220, relay=[x.x.x.x] [x.x.x.x], dsn=2.0.0, stat=Sent (OK
id=1dlJTG-000053-92)

So, let's compare notes.

On Fri, Aug 25, 2017 at 12:27 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:

> Thank you so much!
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* Friday, August 25, 2017 11:26 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner Ignoring All Emails
>
>
>
> I'm going to spin up an instance on CentOS 7 with sendmail to help figure
> this out with you.
>
>
>
> On Fri, Aug 25, 2017 at 12:22 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
> Here are the 3 ms-sendmail scripts
>
>
>
>
>
> *Ms-sendmail.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sm-client.pid
>
> Environment=SENDMAIL_OPTS=-q1h
>
> ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown
> smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon
> /run/sm-client.pid ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner
> multi-user.target.wants]# [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target Conflicts=postfix.service exim.service
> sendmail.service sm-client.service Wants=ms-sendmail.service
> ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service
>
>
>
>
>
> *Ms-sendmail-in.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sendmail.in.pid
>
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner
> multi-user.target.wants]# [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target Conflicts=postfix.service exim.service
> sendmail.service sm-client.service Wants=ms-sendmail.service
> ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service
>
>
>
>
>
> *Ms-sendmail-out.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sendmail.out.pid
>
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* Friday, August 25, 2017 11:13 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner Ignoring All Emails
>
>
>
> Something doesn't jive here...from your earlier thread...
>
>
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
>
>
> These are not the ones started by ms-sendmail.
>
>
>
> It should be watching /var/spool/mqueue.in, not /var/spool/mqueue...
>
>
>
> You don't have a rogue init scirpt, do you?
>
>
>
>
>
>
>
> On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
> Here are the scripts from /etc/systemd/system.... that systemctl enable
> ms-sendmail created - hopefully that makes sense...:
>
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
> [Unit]
> Description=Sendmail Mail Transport Client for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail-in.service ms-sendmail-out.service
> BindsTo=ms-sendmail-in.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sm-client.pid
> Environment=SENDMAIL_OPTS=-q1h
> ExecStartPre=/bin/touch /run/sm-client.pid
> ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
> ExecStartPre=-/sbin/restorecon /run/sm-client.pid
> ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail-in.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit]
> Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-out.service
> BindsTo=ms-sendmail.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.in.pid
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit]
> Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-in.service
> BindsTo=ms-sendmail.service ms-sendmail-in.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.out.pid
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
> Sent: Friday, August 25, 2017 8:23 AM
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner Ignoring All Emails
>
> On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:
>
> > I did that, from the instructions at the end of the MS install?also
> > confirmed that the directories have the correct permissions.  Mail is
> > flowing, so I assume that the queue folders are correct, MS is just
> > not jumping in?and it is running ?
>
> That doesn't sound like a good assumption to me (about the queue folders
> being correct).
>
> If your listener process is putting received mail into the folder being
> monitored by the queue runner process, for example, MailScanner will be
> sitting waiting for emails to appear in another folder altogether, and mail
> will simply be delivered by the queue runner as soon as it's received.
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
> 1. I'm not sure I understand why you have two queue runner processes
> going, with different timings and monitoring different directories.
>
> 2. Which directory is the middle process (PID 17994) delivering into?
>
>
> Antony.
>
> --
> All generalisations are inaccurate.
>
>                                                    Please reply to the
> list;
>                                                          please *don't* CC
> me.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
> ________________________________
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
> [image:
> https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][image:
> https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/e520229b/attachment.html>

From q at snj.ca  Fri Aug 25 19:42:19 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 19:42:19 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8zKb0YAf0Q5MMf6B+T_bRN7jrWVJnsn5TCNPpaDbSekE1w@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
 <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
 <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>
 <02b949a87ace4c89b39f870a17b577a7@HONDA.snjlaw.local>
 <CABu_8zKb0YAf0Q5MMf6B+T_bRN7jrWVJnsn5TCNPpaDbSekE1w@mail.gmail.com>
Message-ID: <927bb6e0995b4be79b99730687052ad9@HONDA.snjlaw.local>

OK, I confirm that most of that is what I did. I tried to confirm a few things relating to sendmail, and now I did something that broke it entirely?I?m going to take your list here and rebuild and try again ?

I?ll let you know how I make out.

Q

From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 1:50 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

Ok, I have a MailScanner 5.0.6 with sendmail up, operational, and relaying, and mail is correctly flowing through mailscanner.

Steps I took for testing:

1) Install CentOS 7 (I used a minimal install)
2) Install MailScanner 5.0.6 using install.sh with all defaults
3) Enable MailScanner (/etc/MailScanner/defaults)
4) Disable sendmail and sm-client (systemctl disable sendmail, systemctl disable sm-client)
5) Enable ms-sendmail (systemctl enable ms-sendmail)
6) installed sendmail-cf and m4
7) edited /etc/mail/sendmail.mc<http://sendmail.mc> to listen on all interfaces

DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl

8) built new cf

m4 /etc/mail/sendmail.mc<http://sendmail.mc> > /etc/mail/sendmail.cf<http://sendmail.cf>

9) Added my domain/destination to the /etc/mail/mailertable

example.org<http://example.org>   ESMTP:[x.x.x.x]

10) Built mailertable db

makemap hash /etc/mail/mailertable.db < /etc/mail/mailertable

11) Added domain to /etc/mail/relay-domains

example.org<http://example.org>

12) Rebooted (was having issues with mailscanner starting, but reboot cleared that up, probably self inflicted)

Sent an email to this system, and this is my log (edited).

Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: from=<shawniverson at example.com<mailto:shawniverson at example.com>>, size=2220, class=0, nrcpts=1, msgid=<CACg3fsYxMmnMcuikD+7T-ya9Bcjwsreo8LsQ4OaRxyg3yapk2A at mail.example.orgm<mailto:CACg3fsYxMmnMcuikD+7T-ya9Bcjwsreo8LsQ4OaRxyg3yapk2A at mail.example.orgm>>, proto=ESMTP, daemon=MTA, relay=mail-yw0-f177.google.com<http://mail-yw0-f177.google.com> [x.x.x.x]
Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: to=<shawniverson at example.org<mailto:shawniverson at example.org>>, delay=00:00:00, mailer=esmtp, pri=32220, stat=queued
Aug 25 14:37:36 relay MailScanner[2727]: New Batch: Scanning 1 messages, 2755 bytes
Aug 25 14:37:36 relay MailScanner[2727]: Virus and Content Scanning: Starting
Aug 25 14:38:07 relay MailScanner[2727]: Uninfected: Delivered 1 messages
Aug 25 14:38:07 relay MailScanner[2727]: Deleted 1 messages from processing-database
Aug 25 14:38:08 relay sendmail[3566]: v7PIbaMI003547: to=<shawniverson at example.org<mailto:shawniverson at example.org>>, delay=00:00:32, xdelay=00:00:01, mailer=esmtp, pri=122220, relay=[x.x.x.x] [x.x.x.x], dsn=2.0.0, stat=Sent (OK id=1dlJTG-000053-92)

So, let's compare notes.

On Fri, Aug 25, 2017 at 12:27 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Thank you so much!

From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:26 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

I'm going to spin up an instance on CentOS 7 with sendmail to help figure this out with you.

On Fri, Aug 25, 2017 at 12:22 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the 3 ms-sendmail scripts


Ms-sendmail.service

[Service]

Type=forking

PIDFile=/run/sm-client.pid

Environment=SENDMAIL_OPTS=-q1h

ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon /run/sm-client.pid ExecStartPre=-/etc/mail/make ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS



[Install]

WantedBy=multi-user.target

Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service





Ms-sendmail-in.service

[Service]

Type=forking

PIDFile=/run/sendmail.in.pid

ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service





Ms-sendmail-out.service

[Service]

Type=forking

PIDFile=/run/sendmail.out.pid

ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-in.service


From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:13 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

Something doesn't jive here...from your earlier thread...

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

These are not the ones started by ms-sendmail.

It should be watching /var/spool/mqueue.in<http://mqueue.in>, not /var/spool/mqueue...

You don't have a rogue init scirpt, do you?



On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the scripts from /etc/systemd/system.... that systemctl enable ms-sendmail created - hopefully that makes sense...:

[root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
[Unit]
Description=Sendmail Mail Transport Client for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail-in.service ms-sendmail-out.service
BindsTo=ms-sendmail-in.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sm-client.pid
Environment=SENDMAIL_OPTS=-q1h
ExecStartPre=/bin/touch /run/sm-client.pid
ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
ExecStartPre=-/sbin/restorecon /run/sm-client.pid
ExecStartPre=-/etc/mail/make
ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS

[Install]
WantedBy=multi-user.target
Also=ms-sendmail-in.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
[Unit]
Description=Sendmail Mail Transport Inbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-out.service
BindsTo=ms-sendmail.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sendmail.in.pid
ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
[Unit]
Description=Sendmail Mail Transport Outbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-in.service
BindsTo=ms-sendmail.service ms-sendmail-in.service

[Service]
Type=forking
PIDFile=/run/sendmail.out.pid
ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-in.service



-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 8:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just
> not jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being correct).

If your listener process is putting received mail into the folder being monitored by the queue runner process, for example, MailScanner will be sitting waiting for emails to appear in another folder altogether, and mail will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

--
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/8a7efe33/attachment-0001.html>

From q at snj.ca  Fri Aug 25 21:00:54 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Fri, 25 Aug 2017 21:00:54 +0000
Subject: MailScanner Ignoring All Emails
In-Reply-To: <CABu_8zKb0YAf0Q5MMf6B+T_bRN7jrWVJnsn5TCNPpaDbSekE1w@mail.gmail.com>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
 <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
 <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>
 <02b949a87ace4c89b39f870a17b577a7@HONDA.snjlaw.local>
 <CABu_8zKb0YAf0Q5MMf6B+T_bRN7jrWVJnsn5TCNPpaDbSekE1w@mail.gmail.com>
Message-ID: <75152af754944c85aff8d4f21c7f7703@HONDA.snjlaw.local>

Bam! Got it working! Not sure what I did wrong, obviously something!

Thanks for the step by step ? I obviously missed something in the official how-to. Lol

Q

From: MailScanner [mailto:mailscanner-bounces+q=snj.ca at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 1:50 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner Ignoring All Emails

Ok, I have a MailScanner 5.0.6 with sendmail up, operational, and relaying, and mail is correctly flowing through mailscanner.

Steps I took for testing:

1) Install CentOS 7 (I used a minimal install)
2) Install MailScanner 5.0.6 using install.sh with all defaults
3) Enable MailScanner (/etc/MailScanner/defaults)
4) Disable sendmail and sm-client (systemctl disable sendmail, systemctl disable sm-client)
5) Enable ms-sendmail (systemctl enable ms-sendmail)
6) installed sendmail-cf and m4
7) edited /etc/mail/sendmail.mc<http://sendmail.mc> to listen on all interfaces

DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl

8) built new cf

m4 /etc/mail/sendmail.mc<http://sendmail.mc> > /etc/mail/sendmail.cf<http://sendmail.cf>

9) Added my domain/destination to the /etc/mail/mailertable

example.org<http://example.org>   ESMTP:[x.x.x.x]

10) Built mailertable db

makemap hash /etc/mail/mailertable.db < /etc/mail/mailertable

11) Added domain to /etc/mail/relay-domains

example.org<http://example.org>

12) Rebooted (was having issues with mailscanner starting, but reboot cleared that up, probably self inflicted)

Sent an email to this system, and this is my log (edited).

Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: from=<shawniverson at example.com<mailto:shawniverson at example.com>>, size=2220, class=0, nrcpts=1, msgid=<CACg3fsYxMmnMcuikD+7T-ya9Bcjwsreo8LsQ4OaRxyg3yapk2A at mail.example.orgm<mailto:CACg3fsYxMmnMcuikD+7T-ya9Bcjwsreo8LsQ4OaRxyg3yapk2A at mail.example.orgm>>, proto=ESMTP, daemon=MTA, relay=mail-yw0-f177.google.com<http://mail-yw0-f177.google.com> [x.x.x.x]
Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: to=<shawniverson at example.org<mailto:shawniverson at example.org>>, delay=00:00:00, mailer=esmtp, pri=32220, stat=queued
Aug 25 14:37:36 relay MailScanner[2727]: New Batch: Scanning 1 messages, 2755 bytes
Aug 25 14:37:36 relay MailScanner[2727]: Virus and Content Scanning: Starting
Aug 25 14:38:07 relay MailScanner[2727]: Uninfected: Delivered 1 messages
Aug 25 14:38:07 relay MailScanner[2727]: Deleted 1 messages from processing-database
Aug 25 14:38:08 relay sendmail[3566]: v7PIbaMI003547: to=<shawniverson at example.org<mailto:shawniverson at example.org>>, delay=00:00:32, xdelay=00:00:01, mailer=esmtp, pri=122220, relay=[x.x.x.x] [x.x.x.x], dsn=2.0.0, stat=Sent (OK id=1dlJTG-000053-92)

So, let's compare notes.

On Fri, Aug 25, 2017 at 12:27 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Thank you so much!

From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:26 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

I'm going to spin up an instance on CentOS 7 with sendmail to help figure this out with you.

On Fri, Aug 25, 2017 at 12:22 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the 3 ms-sendmail scripts


Ms-sendmail.service

[Service]

Type=forking

PIDFile=/run/sm-client.pid

Environment=SENDMAIL_OPTS=-q1h

ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon /run/sm-client.pid ExecStartPre=-/etc/mail/make ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS



[Install]

WantedBy=multi-user.target

Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service





Ms-sendmail-in.service

[Service]

Type=forking

PIDFile=/run/sendmail.in.pid

ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner After=syslog.target network.target Conflicts=postfix.service exim.service sendmail.service sm-client.service Wants=ms-sendmail.service ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service





Ms-sendmail-out.service

[Service]

Type=forking

PIDFile=/run/sendmail.out.pid

ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid



[Install]

WantedBy=multi-user.target

Also=ms-sendmail.service ms-sendmail-in.service


From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Shawn Iverson
Sent: Friday, August 25, 2017 11:13 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

Something doesn't jive here...from your earlier thread...

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

These are not the ones started by ms-sendmail.

It should be watching /var/spool/mqueue.in<http://mqueue.in>, not /var/spool/mqueue...

You don't have a rogue init scirpt, do you?



On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca<mailto:q at snj.ca>> wrote:
Here are the scripts from /etc/systemd/system.... that systemctl enable ms-sendmail created - hopefully that makes sense...:

[root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
[Unit]
Description=Sendmail Mail Transport Client for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail-in.service ms-sendmail-out.service
BindsTo=ms-sendmail-in.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sm-client.pid
Environment=SENDMAIL_OPTS=-q1h
ExecStartPre=/bin/touch /run/sm-client.pid
ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
ExecStartPre=-/sbin/restorecon /run/sm-client.pid
ExecStartPre=-/etc/mail/make
ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS

[Install]
WantedBy=multi-user.target
Also=ms-sendmail-in.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
[Unit]
Description=Sendmail Mail Transport Inbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-out.service
BindsTo=ms-sendmail.service ms-sendmail-out.service

[Service]
Type=forking
PIDFile=/run/sendmail.in.pid
ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in<http://mqueue.in> -OPidFile=/run/sendmail.in.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-out.service
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]#
[root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
[Unit]
Description=Sendmail Mail Transport Outbound Agent for MailScanner
After=syslog.target network.target
Conflicts=postfix.service exim.service sendmail.service sm-client.service
Wants=ms-sendmail.service ms-sendmail-in.service
BindsTo=ms-sendmail.service ms-sendmail-in.service

[Service]
Type=forking
PIDFile=/run/sendmail.out.pid
ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid

[Install]
WantedBy=multi-user.target
Also=ms-sendmail.service ms-sendmail-in.service



-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+q<mailto:mailscanner-bounces%2Bq>=snj.ca at lists.mailscanner.info<mailto:snj.ca at lists.mailscanner.info>] On Behalf Of Antony Stone
Sent: Friday, August 25, 2017 8:23 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: MailScanner Ignoring All Emails

On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:

> I did that, from the instructions at the end of the MS install?also
> confirmed that the directories have the correct permissions.  Mail is
> flowing, so I assume that the queue folders are correct, MS is just
> not jumping in?and it is running ?

That doesn't sound like a good assumption to me (about the queue folders being correct).

If your listener process is putting received mail into the folder being monitored by the queue runner process, for example, MailScanner will be sitting waiting for emails to appear in another folder altogether, and mail will simply be delivered by the queue runner as soon as it's received.

> [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 00:15:00 for /var/spool/mqueue

> root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> connections

> smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> runner at 01:00:00 for /var/spool/clientmqueue

1. I'm not sure I understand why you have two queue runner processes going, with different timings and monitoring different directories.

2. Which directory is the middle process (PID 17994) delivering into?


Antony.

--
All generalisations are inaccurate.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/72cb773a/attachment.html>

From iversons at rushville.k12.in.us  Fri Aug 25 21:07:50 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 25 Aug 2017 17:07:50 -0400
Subject: MailScanner Ignoring All Emails
In-Reply-To: <75152af754944c85aff8d4f21c7f7703@HONDA.snjlaw.local>
References: <148982b31687440e862e577c162ac624@HONDA.snjlaw.local>
 <CABu_8z+SgmhgJ6+Hv5wFAj33VeQ60dyxJSSc5OeOOQbngB9g6Q@mail.gmail.com>
 <092ac5c113b44a1c97245d54608d9f18@HONDA.snjlaw.local>
 <201708251522.41307.Antony.Stone@mailscanner.open.source.it>
 <6058c311123c47fbaf218e0e2b95a0cc@HONDA.snjlaw.local>
 <CABu_8zKzHjimZHYoeaPG_zUaxgm+8mP5HVSJ8cK3m_3X2obSZA@mail.gmail.com>
 <080afca01cdb4f6db10b6d25f2777b54@HONDA.snjlaw.local>
 <CABu_8z+YH-qtmL_7JewW1JCM67bWXmZz0Qy_dccPUO3c-PrY5Q@mail.gmail.com>
 <02b949a87ace4c89b39f870a17b577a7@HONDA.snjlaw.local>
 <CABu_8zKb0YAf0Q5MMf6B+T_bRN7jrWVJnsn5TCNPpaDbSekE1w@mail.gmail.com>
 <75152af754944c85aff8d4f21c7f7703@HONDA.snjlaw.local>
Message-ID: <CABu_8zJPqMZKqDn-K3KORTHgUJHDYcA_p57OHXiEXBexOTrHng@mail.gmail.com>

lol @ official

I think we need to update some documentation :P

On Fri, Aug 25, 2017 at 5:00 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:

> Bam! Got it working! Not sure what I did wrong, obviously something!
>
>
>
> Thanks for the step by step ? I obviously missed something in the official
> how-to. Lol
>
>
>
> Q
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* Friday, August 25, 2017 1:50 PM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner Ignoring All Emails
>
>
>
> Ok, I have a MailScanner 5.0.6 with sendmail up, operational, and
> relaying, and mail is correctly flowing through mailscanner.
>
>
>
> Steps I took for testing:
>
>
>
> 1) Install CentOS 7 (I used a minimal install)
>
> 2) Install MailScanner 5.0.6 using install.sh with all defaults
>
> 3) Enable MailScanner (/etc/MailScanner/defaults)
>
> 4) Disable sendmail and sm-client (systemctl disable sendmail, systemctl
> disable sm-client)
>
> 5) Enable ms-sendmail (systemctl enable ms-sendmail)
>
> 6) installed sendmail-cf and m4
>
> 7) edited /etc/mail/sendmail.mc to listen on all interfaces
>
>
>
> DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
>
>
>
> 8) built new cf
>
>
>
> m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
>
>
>
> 9) Added my domain/destination to the /etc/mail/mailertable
>
>
>
> example.org   ESMTP:[x.x.x.x]
>
>
>
> 10) Built mailertable db
>
>
>
> makemap hash /etc/mail/mailertable.db < /etc/mail/mailertable
>
>
>
> 11) Added domain to /etc/mail/relay-domains
>
>
>
> example.org
>
>
>
> 12) Rebooted (was having issues with mailscanner starting, but reboot
> cleared that up, probably self inflicted)
>
>
>
> Sent an email to this system, and this is my log (edited).
>
>
>
> Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: from=<
> shawniverson at example.com>, size=2220, class=0, nrcpts=1, msgid=<
> CACg3fsYxMmnMcuikD+7T-ya9Bcjwsreo8LsQ4OaRxyg3yapk2A at mail.example.orgm>,
> proto=ESMTP, daemon=MTA, relay=mail-yw0-f177.google.com [x.x.x.x]
>
> Aug 25 14:37:36 relay sendmail[3547]: v7PIbaMI003547: to=<
> shawniverson at example.org>, delay=00:00:00, mailer=esmtp, pri=32220,
> stat=queued
>
> Aug 25 14:37:36 relay MailScanner[2727]: New Batch: Scanning 1 messages,
> 2755 bytes
>
> Aug 25 14:37:36 relay MailScanner[2727]: Virus and Content Scanning:
> Starting
>
> Aug 25 14:38:07 relay MailScanner[2727]: Uninfected: Delivered 1 messages
>
> Aug 25 14:38:07 relay MailScanner[2727]: Deleted 1 messages from
> processing-database
>
> Aug 25 14:38:08 relay sendmail[3566]: v7PIbaMI003547: to=<
> shawniverson at example.org>, delay=00:00:32, xdelay=00:00:01, mailer=esmtp,
> pri=122220, relay=[x.x.x.x] [x.x.x.x], dsn=2.0.0, stat=Sent (OK
> id=1dlJTG-000053-92)
>
>
>
> So, let's compare notes.
>
>
>
> On Fri, Aug 25, 2017 at 12:27 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
> Thank you so much!
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* Friday, August 25, 2017 11:26 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner Ignoring All Emails
>
>
>
> I'm going to spin up an instance on CentOS 7 with sendmail to help figure
> this out with you.
>
>
>
> On Fri, Aug 25, 2017 at 12:22 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
> Here are the 3 ms-sendmail scripts
>
>
>
>
>
> *Ms-sendmail.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sm-client.pid
>
> Environment=SENDMAIL_OPTS=-q1h
>
> ExecStartPre=/bin/touch /run/sm-client.pid ExecStartPre=/bin/chown
> smmsp:smmsp /run/sm-client.pid ExecStartPre=-/sbin/restorecon
> /run/sm-client.pid ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail-in.service ms-sendmail-out.service [root at mailscanner
> multi-user.target.wants]# [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit] Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target Conflicts=postfix.service exim.service
> sendmail.service sm-client.service Wants=ms-sendmail.service
> ms-sendmail-out.service BindsTo=ms-sendmail.service ms-sendmail-out.service
>
>
>
>
>
> *Ms-sendmail-in.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sendmail.in.pid
>
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail.service ms-sendmail-out.service [root at mailscanner
> multi-user.target.wants]# [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit] Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target Conflicts=postfix.service exim.service
> sendmail.service sm-client.service Wants=ms-sendmail.service
> ms-sendmail-in.service BindsTo=ms-sendmail.service ms-sendmail-in.service
>
>
>
>
>
> *Ms-sendmail-out.service*
>
> [Service]
>
> Type=forking
>
> PIDFile=/run/sendmail.out.pid
>
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
>
>
> [Install]
>
> WantedBy=multi-user.target
>
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* Friday, August 25, 2017 11:13 AM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner Ignoring All Emails
>
>
>
> Something doesn't jive here...from your earlier thread...
>
>
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
>
>
> These are not the ones started by ms-sendmail.
>
>
>
> It should be watching /var/spool/mqueue.in, not /var/spool/mqueue...
>
>
>
> You don't have a rogue init scirpt, do you?
>
>
>
>
>
>
>
> On Fri, Aug 25, 2017 at 12:03 PM, Quintin S. Giesbrecht <q at snj.ca> wrote:
>
> Here are the scripts from /etc/systemd/system.... that systemctl enable
> ms-sendmail created - hopefully that makes sense...:
>
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail.service
> [Unit]
> Description=Sendmail Mail Transport Client for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail-in.service ms-sendmail-out.service
> BindsTo=ms-sendmail-in.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sm-client.pid
> Environment=SENDMAIL_OPTS=-q1h
> ExecStartPre=/bin/touch /run/sm-client.pid
> ExecStartPre=/bin/chown smmsp:smmsp /run/sm-client.pid
> ExecStartPre=-/sbin/restorecon /run/sm-client.pid
> ExecStartPre=-/etc/mail/make
> ExecStart=/usr/sbin/sendmail -L sm-msp-queue -Ac $SENDMAIL_OPTS
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail-in.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-in.service
> [Unit]
> Description=Sendmail Mail Transport Inbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-out.service
> BindsTo=ms-sendmail.service ms-sendmail-out.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.in.pid
> ExecStart=/usr/sbin/sendmail -bd -OPrivacyOptions=noetrn
> -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in
> -OPidFile=/run/sendmail.in.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-out.service
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]#
> [root at mailscanner multi-user.target.wants]# cat ms-sendmail-out.service
> [Unit]
> Description=Sendmail Mail Transport Outbound Agent for MailScanner
> After=syslog.target network.target
> Conflicts=postfix.service exim.service sendmail.service sm-client.service
> Wants=ms-sendmail.service ms-sendmail-in.service
> BindsTo=ms-sendmail.service ms-sendmail-in.service
>
> [Service]
> Type=forking
> PIDFile=/run/sendmail.out.pid
> ExecStart=/usr/sbin/sendmail -q15m -OPidFile=/run/sendmail.out.pid
>
> [Install]
> WantedBy=multi-user.target
> Also=ms-sendmail.service ms-sendmail-in.service
>
>
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+q=
> snj.ca at lists.mailscanner.info] On Behalf Of Antony Stone
> Sent: Friday, August 25, 2017 8:23 AM
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner Ignoring All Emails
>
> On Friday 25 August 2017 at 15:16:48, Quintin S. Giesbrecht wrote:
>
> > I did that, from the instructions at the end of the MS install?also
> > confirmed that the directories have the correct permissions.  Mail is
> > flowing, so I assume that the queue folders are correct, MS is just
> > not jumping in?and it is running ?
>
> That doesn't sound like a good assumption to me (about the queue folders
> being correct).
>
> If your listener process is putting received mail into the folder being
> monitored by the queue runner process, for example, MailScanner will be
> sitting waiting for emails to appear in another folder altogether, and mail
> will simply be delivered by the queue runner as soon as it's received.
>
> > [root at mailscanner MailWatch-1.2.5]# ps -ef|grep sendmail
> > root     17992     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 00:15:00 for /var/spool/mqueue
>
> > root     17994     1  0 08:08 ?        00:00:00 sendmail: accepting
> > connections
>
> > smmsp    18007     1  0 08:08 ?        00:00:00 sendmail: Queue
> > runner at 01:00:00 for /var/spool/clientmqueue
>
> 1. I'm not sure I understand why you have two queue runner processes
> going, with different timings and monitoring different directories.
>
> 2. Which directory is the middle process (PID 17994) delivering into?
>
>
> Antony.
>
> --
> All generalisations are inaccurate.
>
>                                                    Please reply to the
> list;
>                                                          please *don't* CC
> me.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
> ________________________________
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
> [image:
> https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][image:
> https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x271 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/f40cca57/attachment-0001.html>

From iversons at rushville.k12.in.us  Sun Aug 27 21:48:54 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 27 Aug 2017 17:48:54 -0400
Subject: Phishing Server Change
In-Reply-To: <c09bfd41-de2c-629c-df7d-af2d6395618b@mtl.mit.edu>
References: <069201d31a93$0d52a0f0$27f7e2d0$@mailborder.com>
 <3ef26a2e-56d7-5b19-ee34-3ee295ee7055@festa.bg>
 <e7ab6dae-fc73-4af4-6f6a-58c2383b40db@mtl.mit.edu>
 <1656938329.207044.1503413095806.JavaMail.zimbra@vdb.nl>
 <5750ea18-f43e-f9be-517b-56c1d722afab@mtl.mit.edu>
 <75553495.208628.1503463588709.JavaMail.zimbra@vdb.nl>
 <c09bfd41-de2c-629c-df7d-af2d6395618b@mtl.mit.edu>
Message-ID: <CABu_8zKhEZn6sbsn55Thk=GmNmtrB59EFBis6UmcWA0Putrniw@mail.gmail.com>

Patch applied.

Updated script attached with very minor modifications.

Tested and preparing to pull into master branch as well (for 5.0.6-4).

On Wed, Aug 23, 2017 at 11:40 AM, Thomas Lohman <thomasl at mtl.mit.edu> wrote:

> Hi Thom,
>
> Thanks for the quick updates.  It is working for me.  I've attached a
> patch against v0.2.0 with a few more site changes that may be of interest
> to be incorporated in some manner into the project's script.
>
> (1) Made the systemd service name settable at the top of the script in
> case anyone has a different name for whatever reason.
>
> (2) Added logic to determine what the syslog facility name should be set
> to based on the MailScanner configuration files and changed 'mail' to
> $SYSLOG throughout the script.
> (3) Added additional logging if the either file downloaded is possibly
> corrupt.  Related to this, if the wget/curl combo fail for whatever reason,
> I remove whatever may have been downloaded and log an error.  The script no
> longer exits and continues after setting a "got an error" variable to 1.
> As currently written, the script should drop down and get a another error
> when it sees that there is no bad/safe master file.  At that point, the
> {bad/safe}_updated boolean is set back to 0.   At the very end, exit
> returns whatever "got an error" is set to.  I made these changes since I
> wanted to be alerted if the file downloaded is possibly corrupted but also
> wanted to give the script a chance to process the safe sites even if the
> bad sites file had problems.
>
> Anyhow, if you find any of this useful then feel free to incorporate the
> changes in some manner.
>
> cheers,
>
>
> --tom
>
>
> On 08/23/2017 12:46 AM, Thom van der Boon wrote:
>
> Hi all,
>
> Attached a new version of the ms-phising-script for testing
>
> What has changed:
>
>    - Serious typo in the restart Mailscanner part
>    - If one of the two custom files is changed, the script will
>    regenerate the file and if configured restart mailscanner
>    - Added support for restarting MailScanner on systemd systems
>    - And various minor other enhancements
>
> Any feedback is highly appriciated
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA  Babberich
> Tel.: +31 (0)88 4272727
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------
> *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu> <thomasl at mtl.mit.edu>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Dinsdag 22 augustus 2017 19:06:16
> *Onderwerp: *Re: Phishing Server Change
>
> Hi Thom,
>
> I've attached a patch based off the copy of the script downloaded from the
> site that seems to be working for me.  It should update the bad/safe conf
> files if either the date of the master or the custom file is newer than the
> conf file date.
> hopefully it is useful.
>
>
> --tom
>
>
> On 08/22/2017 10:44 AM, Thom van der Boon wrote:
>
> Hi Tom,
>
> It does not. Will incorporate that in the next version.
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA  Babberich
> Tel.: +31 (0)88 4272727
> Fax: +31 (0)88 4272789
> Home Page: http://www.vdb.nl/
>
> ------------------------------
> *Van: *"Thomas Lohman" <thomasl at mtl.mit.edu> <thomasl at mtl.mit.edu>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Dinsdag 22 augustus 2017 16:41:59
> *Onderwerp: *Re: Phishing Server Change
>
> Hi,
>
> how does the script deal with the use case where the master has not
> changed on the remote site (thus no new copy is downloaded) but the
> custom file has changed since the last run?  It looks like the changes
> to the custom file will not be merged into the
> phishing.safe.sites.conf/phishing.bad.sites.conf file unless
> safe_updated/bad_updated has been set to 1.
>
> thanks,
>
>
> --tom
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170827/aefc1feb/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ms-update-phishing
Type: application/octet-stream
Size: 16926 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170827/aefc1feb/attachment.obj>

From wt at dld2000.com  Wed Aug 30 13:26:50 2017
From: wt at dld2000.com (Walt Thiessen)
Date: Wed, 30 Aug 2017 09:26:50 -0400
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
Message-ID: <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>

I'm trying to track down an issue on my VPS.

For some reason, every 7-10 days or so the server crashes because the
container exceeds the allowed number of lockedpages.

https://openvz.org/UBC_auxiliary_parameters#lockedpages

MailScanner and MySQL are the two processes that use the most memory on
my system (CentOS 7) by far, so I'm investigating each as much as I can
to try to identify why this is happening.

The server doesn't run out of memory. On the contrary, usually about
half the memory remains unallocated when these events occur.

Has anyone run into any issues with MailScanner locking too many pages
in memory?

Walt



From jerry.benton at mailborder.com  Wed Aug 30 13:32:14 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 30 Aug 2017 09:32:14 -0400
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
Message-ID: <032901d32194$646f5290$2d4df7b0$@mailborder.com>

Do you mean lock files? Depending on your distro, it is set to something
small like 4096. You need to set it to 65535. in your
/etc/security/limits.conf


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 9:27 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: any issues with MailScanner and locked pages?

I'm trying to track down an issue on my VPS.

For some reason, every 7-10 days or so the server crashes because the
container exceeds the allowed number of lockedpages.

https://openvz.org/UBC_auxiliary_parameters#lockedpages

MailScanner and MySQL are the two processes that use the most memory on my
system (CentOS 7) by far, so I'm investigating each as much as I can to try
to identify why this is happening.

The server doesn't run out of memory. On the contrary, usually about half
the memory remains unallocated when these events occur.

Has anyone run into any issues with MailScanner locking too many pages in
memory?

Walt




--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner



From wt at dld2000.com  Wed Aug 30 14:17:05 2017
From: wt at dld2000.com (Walt Thiessen)
Date: Wed, 30 Aug 2017 10:17:05 -0400
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <032901d32194$646f5290$2d4df7b0$@mailborder.com>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
 <032901d32194$646f5290$2d4df7b0$@mailborder.com>
Message-ID: <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>

Hi Jerry,

Hi Jerry,

I checked that file at your suggestion, and everything is commented out. 
Within the docblock, there are no settings for locks.

The locks problem appears to be related to a limit set within my VPS 
container by my hosting provider. Apparently, my VPS server is allocated 
a little more than 3200 locks. After that, it degrades and crashes. The 
provider isn't willing to increase it without me buying more processing 
power from them.

However, even with what I have right now, I'm not using much processor 
at all, and as I mentioned in the previous message I'm not using up my 
allocated memory (not even close). My server load is typically in the 
range of 0.20 to 0.50 on a three processor system.

That's why I'm trying to search for another way to fix this instead of 
just throwing more processing power at it.

Walt


On 8/30/2017 9:32 AM, Jerry Benton wrote:
> Do you mean lock files? Depending on your distro, it is set to something
> small like 4096. You need to set it to 65535. in your
> /etc/security/limits.conf
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1   (843) 800-8605
> +44 (020) 3883-8605
>
>
> -----Original Message-----
> From: MailScanner
> [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
> fo] On Behalf Of Walt Thiessen
> Sent: Wednesday, August 30, 2017 9:27 AM
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: any issues with MailScanner and locked pages?
>
> I'm trying to track down an issue on my VPS.
>
> For some reason, every 7-10 days or so the server crashes because the
> container exceeds the allowed number of lockedpages.
>
> https://openvz.org/UBC_auxiliary_parameters#lockedpages
>
> MailScanner and MySQL are the two processes that use the most memory on my
> system (CentOS 7) by far, so I'm investigating each as much as I can to try
> to identify why this is happening.
>
> The server doesn't run out of memory. On the contrary, usually about half
> the memory remains unallocated when these events occur.
>
> Has anyone run into any issues with MailScanner locking too many pages in
> memory?
>
> Walt
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/14d53e79/attachment.html>

From jerry.benton at mailborder.com  Wed Aug 30 14:17:24 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 30 Aug 2017 10:17:24 -0400
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
 <032901d32194$646f5290$2d4df7b0$@mailborder.com>
 <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>
Message-ID: <035901d3219a$b37ed3f0$1a7c7bd0$@mailborder.com>

Walt,

 

Reduce the number of MailSanner child processes to 2 or 3. Unless your server is crazy busy, you don?t need more than that. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 10:17 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: any issues with MailScanner and locked pages?

 

Hi Jerry,

Hi Jerry,

I checked that file at your suggestion, and everything is commented out. Within the docblock, there are no settings for locks.

The locks problem appears to be related to a limit set within my VPS container by my hosting provider. Apparently, my VPS server is allocated a little more than 3200 locks. After that, it degrades and crashes. The provider isn't willing to increase it without me buying more processing power from them. 

However, even with what I have right now, I'm not using much processor at all, and as I mentioned in the previous message I'm not using up my allocated memory (not even close). My server load is typically in the range of 0.20 to 0.50 on a three processor system. 

That's why I'm trying to search for another way to fix this instead of just throwing more processing power at it.

Walt

 

On 8/30/2017 9:32 AM, Jerry Benton wrote:

Do you mean lock files? Depending on your distro, it is set to something
small like 4096. You need to set it to 65535. in your
/etc/security/limits.conf
 
 
--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605
 
 
-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 9:27 AM
To: MailScanner Discussion  <mailto:mailscanner at lists.mailscanner.info> <mailscanner at lists.mailscanner.info>
Subject: any issues with MailScanner and locked pages?
 
I'm trying to track down an issue on my VPS.
 
For some reason, every 7-10 days or so the server crashes because the
container exceeds the allowed number of lockedpages.
 
https://openvz.org/UBC_auxiliary_parameters#lockedpages
 
MailScanner and MySQL are the two processes that use the most memory on my
system (CentOS 7) by far, so I'm investigating each as much as I can to try
to identify why this is happening.
 
The server doesn't run out of memory. On the contrary, usually about half
the memory remains unallocated when these events occur.
 
Has anyone run into any issues with MailScanner locking too many pages in
memory?
 
Walt
 
 
 
 
--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner
 
 
 
 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/4965971c/attachment.html>

From michael.boettger at crossip.net  Wed Aug 30 14:54:20 2017
From: michael.boettger at crossip.net (=?utf-8?B?TWljaGFlbCBCw7Z0dGdlcg==?=)
Date: Wed, 30 Aug 2017 14:54:20 +0000
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <035901d3219a$b37ed3f0$1a7c7bd0$@mailborder.com>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
 <032901d32194$646f5290$2d4df7b0$@mailborder.com>
 <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>
 <035901d3219a$b37ed3f0$1a7c7bd0$@mailborder.com>
Message-ID: <7A0E3179-8D26-4A3B-832A-AE20303AAFED@crossip.net>

Hi Jerry,

hope you won?t call this crazy busy:

MailScanner:

 YES

17 children

Postfix:

 YES

19 proc(s)

Load Average:

1 minute:

0.52

5 minutes:

0.79

15 minutes:

0.89




Mit freundlichen Gr??en,
With best regards,

Michael B?ttger
product and strategy management
?
[cid:image001.png at 01D321B0.B6B82B00]
Besondere Anspr?che. Individuelle L?sungen.
Particular demands. Individual solutions.
crossip communications gmbh
A-1020 Wien, Wohlmutstrasse 27
Sitz der Gesellschaft: 1020 Wien, ?sterreich
Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

Haftungsausschluss / Disclaimer: http://www.crossip.net/de/legal/haftungsausschluss-disclaimer<file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer>

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info> im Auftrag von Jerry Benton <jerry.benton at mailborder.com>
Organisation: Mailborder Systems
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Datum: Mittwoch, 30. August 2017 um 16:17
An: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Betreff: RE: any issues with MailScanner and locked pages?

Walt,

Reduce the number of MailSanner child processes to 2 or 3. Unless your server is crazy busy, you don?t need more than that.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605



From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 10:17 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: any issues with MailScanner and locked pages?


Hi Jerry,

Hi Jerry,

I checked that file at your suggestion, and everything is commented out. Within the docblock, there are no settings for locks.

The locks problem appears to be related to a limit set within my VPS container by my hosting provider. Apparently, my VPS server is allocated a little more than 3200 locks. After that, it degrades and crashes. The provider isn't willing to increase it without me buying more processing power from them.

However, even with what I have right now, I'm not using much processor at all, and as I mentioned in the previous message I'm not using up my allocated memory (not even close). My server load is typically in the range of 0.20 to 0.50 on a three processor system.

That's why I'm trying to search for another way to fix this instead of just throwing more processing power at it.

Walt

On 8/30/2017 9:32 AM, Jerry Benton wrote:

Do you mean lock files? Depending on your distro, it is set to something

small like 4096. You need to set it to 65535. in your

/etc/security/limits.conf





--

Jerry Benton

www.mailborder.com<http://www.mailborder.com>

+1   (843) 800-8605

+44 (020) 3883-8605





-----Original Message-----

From: MailScanner

[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in

fo] On Behalf Of Walt Thiessen

Sent: Wednesday, August 30, 2017 9:27 AM

To: MailScanner Discussion <mailscanner at lists.mailscanner.info><mailto:mailscanner at lists.mailscanner.info>

Subject: any issues with MailScanner and locked pages?



I'm trying to track down an issue on my VPS.



For some reason, every 7-10 days or so the server crashes because the

container exceeds the allowed number of lockedpages.



https://openvz.org/UBC_auxiliary_parameters#lockedpages



MailScanner and MySQL are the two processes that use the most memory on my

system (CentOS 7) by far, so I'm investigating each as much as I can to try

to identify why this is happening.



The server doesn't run out of memory. On the contrary, usually about half

the memory remains unallocated when these events occur.



Has anyone run into any issues with MailScanner locking too many pages in

memory?



Walt









--

MailScanner mailing list

mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>

http://lists.mailscanner.info/mailman/listinfo/mailscanner









-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/c9fb9296/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7190 bytes
Desc: image001.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/c9fb9296/attachment.png>

From jerry.benton at mailborder.com  Wed Aug 30 14:58:30 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 30 Aug 2017 10:58:30 -0400
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <7A0E3179-8D26-4A3B-832A-AE20303AAFED@crossip.net>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
 <032901d32194$646f5290$2d4df7b0$@mailborder.com>
 <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>
 <035901d3219a$b37ed3f0$1a7c7bd0$@mailborder.com>
 <7A0E3179-8D26-4A3B-832A-AE20303AAFED@crossip.net>
Message-ID: <036c01d321a0$719dfe60$54d9fb20$@mailborder.com>

You need to reduce the number of MailScanner children if you are running out of files. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Michael B?ttger
Sent: Wednesday, August 30, 2017 10:54 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: any issues with MailScanner and locked pages?

 

Hi Jerry,

 

hope you won?t call this crazy busy:

 


MailScanner:

 YES 

17 children


Postfix:

 YES 

19 proc(s)


Load Average: 

1 minute: 

0.52


5 minutes: 

0.79


15 minutes: 

0.89

 

 

 

Mit freundlichen Gr??en,

With best regards,

 

Michael B?ttger

product and strategy management

?



Besondere Anspr?che. Individuelle L?sungen.

Particular demands. Individual solutions.

crossip communications gmbh

A-1020 Wien, Wohlmutstrasse 27

Sitz der Gesellschaft: 1020 Wien, ?sterreich

Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

 

Haftungsausschluss / Disclaimer:  <file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer> http://www.crossip.net/de/legal/haftungsausschluss-disclaimer

 

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info <mailto:mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info> > im Auftrag von Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> >
Organisation: Mailborder Systems
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Datum: Mittwoch, 30. August 2017 um 16:17
An: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Betreff: RE: any issues with MailScanner and locked pages?

 

Walt,

 

Reduce the number of MailSanner child processes to 2 or 3. Unless your server is crazy busy, you don?t need more than that. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 10:17 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: any issues with MailScanner and locked pages?

 

Hi Jerry,

Hi Jerry,

I checked that file at your suggestion, and everything is commented out. Within the docblock, there are no settings for locks.

The locks problem appears to be related to a limit set within my VPS container by my hosting provider. Apparently, my VPS server is allocated a little more than 3200 locks. After that, it degrades and crashes. The provider isn't willing to increase it without me buying more processing power from them. 

However, even with what I have right now, I'm not using much processor at all, and as I mentioned in the previous message I'm not using up my allocated memory (not even close). My server load is typically in the range of 0.20 to 0.50 on a three processor system. 

That's why I'm trying to search for another way to fix this instead of just throwing more processing power at it.

Walt

 

On 8/30/2017 9:32 AM, Jerry Benton wrote:

Do you mean lock files? Depending on your distro, it is set to something
small like 4096. You need to set it to 65535. in your
/etc/security/limits.conf
 
 
--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1   (843) 800-8605
+44 (020) 3883-8605
 
 
-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 9:27 AM
To: MailScanner Discussion  <mailto:mailscanner at lists.mailscanner.info> <mailscanner at lists.mailscanner.info>
Subject: any issues with MailScanner and locked pages?
 
I'm trying to track down an issue on my VPS.
 
For some reason, every 7-10 days or so the server crashes because the
container exceeds the allowed number of lockedpages.
 
https://openvz.org/UBC_auxiliary_parameters#lockedpages
 
MailScanner and MySQL are the two processes that use the most memory on my
system (CentOS 7) by far, so I'm investigating each as much as I can to try
to identify why this is happening.
 
The server doesn't run out of memory. On the contrary, usually about half
the memory remains unallocated when these events occur.
 
Has anyone run into any issues with MailScanner locking too many pages in
memory?
 
Walt
 
 
 
 
--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner
 
 
 
 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/f5fa347d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7190 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/f5fa347d/attachment-0001.png>

From q at snj.ca  Wed Aug 30 20:28:52 2017
From: q at snj.ca (Quintin S. Giesbrecht)
Date: Wed, 30 Aug 2017 20:28:52 +0000
Subject: Signature Variables Not Working
Message-ID: <d2555c458e684444a0f3c199236339c9@HONDA.snjlaw.local>

I have this in my inline.sig.html file:

<br />date:
<br />$date
<br />to:
<br />$to
<br />from:
<br />$from
<br />subject:
<br />$subject
<br />hostname:
<br />$hostname

And this is what ends up on the email:

date:
to:
from:
email at domain.com
subject:
SUBJECT LINE
hostname:

There should be a returned answer on the next line after every line that ends in a :

$subject and $to are the only 2 in this example that seem to work.

Any ideas?

Thanks?

________________________________
[Smith Neufeld Jodoin LLP]
Sent by Quintin Giesbrecht IT Manager
85 PTH 12 North - Steinbach, Manitoba  R5G 1A7
Tel: 204-326-3442 . Dir: (204)346-5106 . Fax: 204-326-2154


________________________________
This communication, including its attachments, if any, is confidential and intended only for the person(s) to whom it is addressed, and may contain proprietary and/or privileged material. Any unauthorized review, disclosure, copying, other distribution of this communication or taking of any action in reliance on its contents is strictly prohibited. If you have received this message in error, please notify SNJ immediately so that we may amend our records. Then, please delete this message, and its attachments, if any, without reading, copying or forwarding it to anyone.






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170830/abcd92f7/attachment.html>

From thom at vdb.nl  Thu Aug 31 03:44:47 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Thu, 31 Aug 2017 05:44:47 +0200 (CEST)
Subject: Phishing Server Change
In-Reply-To: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
References: <045b01d30c15$cbb0bb40$631231c0$@mailborder.com>
Message-ID: <738441954.278909.1504151087513.JavaMail.zimbra@vdb.nl>

Jerry, 

It has been almost one month since the below e-mail..... 

Did the traffic on the server go down with the new scripts? 


Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Jerry Benton" <jerry.benton at mailborder.com> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Donderdag 3 augustus 2017 07:03:07 
Onderwerp: Phishing Server Change 

Please use the updated version of the phishing updates script from 
http://phishing.mailscanner.info/ 

I am trying to reduce bandwidth and the new script uses curl as the primary 
method, which support gzip by default. The fallback is wget, which uses more 
bandwidth. Most servers are still using the older update script version that 
uses wget as the primary method. (You cannot just tell wget to use gzip 
because the downloaded file ends up staying compressed and thus useless.) 

The phishing server does about 550GB per month in transfers. Using wget the 
bad phishing file transfer size is 280081 and with curl it is 119027. That 
is almost half the transfer size. I would like to try to get that 550GB 
number down. I don't want to have to pull out the big stick and start 
blocking wget user agents, so please help me out here. 

As a side note, there is no point in updating the phishing files every hour. 
They get updated six times per day. If you are running every hour, please 
change your cron settings to something less taxing. Again, I don't want to 
pull out the big stick and start throttling IPs that are updating too often. 


-- 
Jerry Benton 
www.mailborder.com 
+1 (843) 800-8605 
+44 (020) 3883-8605 





-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/c88fb855/attachment.html>

From michael.boettger at crossip.net  Thu Aug 31 13:38:05 2017
From: michael.boettger at crossip.net (=?utf-8?B?TWljaGFlbCBCw7Z0dGdlcg==?=)
Date: Thu, 31 Aug 2017 13:38:05 +0000
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <036c01d321a0$719dfe60$54d9fb20$@mailborder.com>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
 <032901d32194$646f5290$2d4df7b0$@mailborder.com>
 <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>
 <035901d3219a$b37ed3f0$1a7c7bd0$@mailborder.com>
 <7A0E3179-8D26-4A3B-832A-AE20303AAFED@crossip.net>
 <036c01d321a0$719dfe60$54d9fb20$@mailborder.com>
Message-ID: <A4E3512E-BF2E-421D-8359-FA69E54E0F31@crossip.net>

Hi Jerry,

I have now reduced the children to 6 in the config file. This is what WailWatch reports after 24 hrs of runtime:

Status

MailScanner:

 YES

10 children

Postfix:

 YES

12 proc(s)

Load Average:

1 minute:

2.47

5 minutes:

2.86

15 minutes:

2.63


Can you see the difference in load, before I had 16 children in the config file.

Is there something wrong ?

CentOS 7
8GB RAM, 8 Cores   X5650  @ 2.67GHz,
avg. 3000 emails per hour

              total        used        free      shared  buff/cache   available
Mem:        8388608     1267292     5935508       93668     1185808     6936726


Mit freundlichen Gr??en,
With best regards,

Michael B?ttger
product and strategy management
?
[cid:image001.png at 01D3226F.3A40B5F0]
Besondere Anspr?che. Individuelle L?sungen.
Particular demands. Individual solutions.
crossip communications gmbh
A-1020 Wien, Wohlmutstrasse 27
Sitz der Gesellschaft: 1020 Wien, ?sterreich
Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

Haftungsausschluss / Disclaimer: http://www.crossip.net/de/legal/haftungsausschluss-disclaimer<file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer>

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info> im Auftrag von Jerry Benton <jerry.benton at mailborder.com>
Organisation: Mailborder Systems
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Datum: Mittwoch, 30. August 2017 um 16:58
An: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Betreff: RE: any issues with MailScanner and locked pages?

You need to reduce the number of MailScanner children if you are running out of files.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605



From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Michael B?ttger
Sent: Wednesday, August 30, 2017 10:54 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: any issues with MailScanner and locked pages?

Hi Jerry,

hope you won?t call this crazy busy:

MailScanner:

 YES

17 children

Postfix:

 YES

19 proc(s)

Load Average:

1 minute:

0.52

5 minutes:

0.79

15 minutes:

0.89




Mit freundlichen Gr??en,
With best regards,

Michael B?ttger
product and strategy management
?
[cid:image002.png at 01D3226F.3A40B5F0]
Besondere Anspr?che. Individuelle L?sungen.
Particular demands. Individual solutions.
crossip communications gmbh
A-1020 Wien, Wohlmutstrasse 27
Sitz der Gesellschaft: 1020 Wien, ?sterreich
Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

Haftungsausschluss / Disclaimer: http://www.crossip.net/de/legal/haftungsausschluss-disclaimer<file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer>

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info<mailto:mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info>> im Auftrag von Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>>
Organisation: Mailborder Systems
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Datum: Mittwoch, 30. August 2017 um 16:17
An: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Betreff: RE: any issues with MailScanner and locked pages?

Walt,

Reduce the number of MailSanner child processes to 2 or 3. Unless your server is crazy busy, you don?t need more than that.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605



From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 10:17 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: any issues with MailScanner and locked pages?


Hi Jerry,

Hi Jerry,

I checked that file at your suggestion, and everything is commented out. Within the docblock, there are no settings for locks.

The locks problem appears to be related to a limit set within my VPS container by my hosting provider. Apparently, my VPS server is allocated a little more than 3200 locks. After that, it degrades and crashes. The provider isn't willing to increase it without me buying more processing power from them.

However, even with what I have right now, I'm not using much processor at all, and as I mentioned in the previous message I'm not using up my allocated memory (not even close). My server load is typically in the range of 0.20 to 0.50 on a three processor system.

That's why I'm trying to search for another way to fix this instead of just throwing more processing power at it.

Walt

On 8/30/2017 9:32 AM, Jerry Benton wrote:

Do you mean lock files? Depending on your distro, it is set to something

small like 4096. You need to set it to 65535. in your

/etc/security/limits.conf





--

Jerry Benton

www.mailborder.com<http://www.mailborder.com>

+1   (843) 800-8605

+44 (020) 3883-8605





-----Original Message-----

From: MailScanner

[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in

fo] On Behalf Of Walt Thiessen

Sent: Wednesday, August 30, 2017 9:27 AM

To: MailScanner Discussion <mailscanner at lists.mailscanner.info><mailto:mailscanner at lists.mailscanner.info>

Subject: any issues with MailScanner and locked pages?



I'm trying to track down an issue on my VPS.



For some reason, every 7-10 days or so the server crashes because the

container exceeds the allowed number of lockedpages.



https://openvz.org/UBC_auxiliary_parameters#lockedpages



MailScanner and MySQL are the two processes that use the most memory on my

system (CentOS 7) by far, so I'm investigating each as much as I can to try

to identify why this is happening.



The server doesn't run out of memory. On the contrary, usually about half

the memory remains unallocated when these events occur.



Has anyone run into any issues with MailScanner locking too many pages in

memory?



Walt









--

MailScanner mailing list

mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>

http://lists.mailscanner.info/mailman/listinfo/mailscanner









-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/0788ea52/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7190 bytes
Desc: image001.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/0788ea52/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 7191 bytes
Desc: image002.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/0788ea52/attachment-0001.png>

From michael.boettger at crossip.net  Thu Aug 31 13:40:01 2017
From: michael.boettger at crossip.net (=?utf-8?B?TWljaGFlbCBCw7Z0dGdlcg==?=)
Date: Thu, 31 Aug 2017 13:40:01 +0000
Subject: any issues with MailScanner and locked pages?
In-Reply-To: <A4E3512E-BF2E-421D-8359-FA69E54E0F31@crossip.net>
References: <005994b1-0a4d-8db0-e7bb-4c2f147a01b9@dld2000.com>
 <7d8d43c9-5ab1-8cab-cc71-54f2f8d3e0ec@dld2000.com>
 <032901d32194$646f5290$2d4df7b0$@mailborder.com>
 <b7d0f64f-1af4-0bbb-1e6f-23827c705a21@dld2000.com>
 <035901d3219a$b37ed3f0$1a7c7bd0$@mailborder.com>
 <7A0E3179-8D26-4A3B-832A-AE20303AAFED@crossip.net>
 <036c01d321a0$719dfe60$54d9fb20$@mailborder.com>
 <A4E3512E-BF2E-421D-8359-FA69E54E0F31@crossip.net>
Message-ID: <C96C97C7-BAF3-4610-9898-E13DE9535258@crossip.net>

Additionally, her ist he limits.conf file

cat /etc/sysconfig/limits.conf
###
*           -         nofile    16384
nobody      soft      nofile    16384
nobody      hard      nofile    63536
nobody      soft      nproc     2047
nobody      hard      nproc     16384
nobody      soft      memlock   1048576
nobody      hard      memlock   1048576




Mit freundlichen Gr??en,
With best regards,

Michael B?ttger
product and strategy management
?
[cid:image001.png at 01D3226F.7FA4B010]
Besondere Anspr?che. Individuelle L?sungen.
Particular demands. Individual solutions.
crossip communications gmbh
A-1020 Wien, Wohlmutstrasse 27
Sitz der Gesellschaft: 1020 Wien, ?sterreich
Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

Haftungsausschluss / Disclaimer: http://www.crossip.net/de/legal/haftungsausschluss-disclaimer<file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer>

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info> im Auftrag von Michael B?ttger <michael.boettger at crossip.net>
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Datum: Donnerstag, 31. August 2017 um 15:39
An: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Betreff: Re: any issues with MailScanner and locked pages?

Hi Jerry,

I have now reduced the children to 6 in the config file. This is what WailWatch reports after 24 hrs of runtime:

Status

MailScanner:

 YES

10 children

Postfix:

 YES

12 proc(s)

Load Average:

1 minute:

2.47

5 minutes:

2.86

15 minutes:

2.63


Can you see the difference in load, before I had 16 children in the config file.

Is there something wrong ?

CentOS 7
8GB RAM, 8 Cores   X5650  @ 2.67GHz,
avg. 3000 emails per hour

              total        used        free      shared  buff/cache   available
Mem:        8388608     1267292     5935508       93668     1185808     6936726


Mit freundlichen Gr??en,
With best regards,

Michael B?ttger
product and strategy management
?
[cid:image002.png at 01D3226F.7FA4B010]
Besondere Anspr?che. Individuelle L?sungen.
Particular demands. Individual solutions.
crossip communications gmbh
A-1020 Wien, Wohlmutstrasse 27
Sitz der Gesellschaft: 1020 Wien, ?sterreich
Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

Haftungsausschluss / Disclaimer: http://www.crossip.net/de/legal/haftungsausschluss-disclaimer<file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer>

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info> im Auftrag von Jerry Benton <jerry.benton at mailborder.com>
Organisation: Mailborder Systems
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Datum: Mittwoch, 30. August 2017 um 16:58
An: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Betreff: RE: any issues with MailScanner and locked pages?

You need to reduce the number of MailScanner children if you are running out of files.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605




From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Michael B?ttger
Sent: Wednesday, August 30, 2017 10:54 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: any issues with MailScanner and locked pages?

Hi Jerry,

hope you won?t call this crazy busy:

MailScanner:

 YES

17 children

Postfix:

 YES

19 proc(s)

Load Average:

1 minute:

0.52

5 minutes:

0.79

15 minutes:

0.89




Mit freundlichen Gr??en,
With best regards,

Michael B?ttger
product and strategy management
?
[cid:image003.png at 01D3226F.7FA4B010]
Besondere Anspr?che. Individuelle L?sungen.
Particular demands. Individual solutions.
crossip communications gmbh
A-1020 Wien, Wohlmutstrasse 27
Sitz der Gesellschaft: 1020 Wien, ?sterreich
Firmenbuchgericht: Handelsgericht Wien, FN 269698 s, Umsatzsteueridentifikationsnummer (UID): ATU62080367

Haftungsausschluss / Disclaimer: http://www.crossip.net/de/legal/haftungsausschluss-disclaimer<file:///Users/mibo/Documents/%23WORK%23/crossip.net/redir.aspx?C=jZ3Qxp1AeEmJ7BNJzMvkKFjE2w-LvdEI3TVxtTY3tmJvxeHfhTg9FM_3NLuRfbqGG31e0CyIdhQ.&URL=http%3a%2f%2fwww.crossip.net%2fde%2flegal%2fhaftungsausschluss-disclaimer>

Von: MailScanner <mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info<mailto:mailscanner-bounces+michael.boettger=crossip.net at lists.mailscanner.info>> im Auftrag von Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>>
Organisation: Mailborder Systems
Antworten an: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Datum: Mittwoch, 30. August 2017 um 16:17
An: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Betreff: RE: any issues with MailScanner and locked pages?

Walt,

Reduce the number of MailSanner child processes to 2 or 3. Unless your server is crazy busy, you don?t need more than that.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605




From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Walt Thiessen
Sent: Wednesday, August 30, 2017 10:17 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: any issues with MailScanner and locked pages?


Hi Jerry,

Hi Jerry,

I checked that file at your suggestion, and everything is commented out. Within the docblock, there are no settings for locks.

The locks problem appears to be related to a limit set within my VPS container by my hosting provider. Apparently, my VPS server is allocated a little more than 3200 locks. After that, it degrades and crashes. The provider isn't willing to increase it without me buying more processing power from them.

However, even with what I have right now, I'm not using much processor at all, and as I mentioned in the previous message I'm not using up my allocated memory (not even close). My server load is typically in the range of 0.20 to 0.50 on a three processor system.

That's why I'm trying to search for another way to fix this instead of just throwing more processing power at it.

Walt

On 8/30/2017 9:32 AM, Jerry Benton wrote:

Do you mean lock files? Depending on your distro, it is set to something

small like 4096. You need to set it to 65535. in your

/etc/security/limits.conf





--

Jerry Benton

www.mailborder.com<http://www.mailborder.com>

+1   (843) 800-8605

+44 (020) 3883-8605





-----Original Message-----

From: MailScanner

[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in

fo] On Behalf Of Walt Thiessen

Sent: Wednesday, August 30, 2017 9:27 AM

To: MailScanner Discussion <mailscanner at lists.mailscanner.info><mailto:mailscanner at lists.mailscanner.info>

Subject: any issues with MailScanner and locked pages?



I'm trying to track down an issue on my VPS.



For some reason, every 7-10 days or so the server crashes because the

container exceeds the allowed number of lockedpages.



https://openvz.org/UBC_auxiliary_parameters#lockedpages



MailScanner and MySQL are the two processes that use the most memory on my

system (CentOS 7) by far, so I'm investigating each as much as I can to try

to identify why this is happening.



The server doesn't run out of memory. On the contrary, usually about half

the memory remains unallocated when these events occur.



Has anyone run into any issues with MailScanner locking too many pages in

memory?



Walt









--

MailScanner mailing list

mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>

http://lists.mailscanner.info/mailman/listinfo/mailscanner









-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/f851cbb2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7190 bytes
Desc: image001.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/f851cbb2/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 7191 bytes
Desc: image002.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/f851cbb2/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 7192 bytes
Desc: image003.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170831/f851cbb2/attachment-0005.png>