MailScanner Ignoring All Emails

Martin Hepworth maxsec at gmail.com
Fri Aug 25 08:23:39 UTC 2017


So you've followed this and restarted both sendmail instances?

https://www.mailscanner.info/sendmail/

On Fri, 25 Aug 2017 at 09:01, Quintin S. Giesbrecht <q at snj.ca> wrote:

> I have searched and searched, and I cannot find an answer for this.
> Everything is working on the server.  It is running Sendmail, and
> configured to relay to our Exchange Server using mailertable.  It works –
> mail from the outside gets received by Sendmail and forwarded to our
> Exchange Server, and visa versa.
>
>
>
> What is not happening, is MailScanner is not scanning anything.  There is
> no indication in the logs (pasted below – this is from an internal test,
> but if an email comes from the outside, it behaves the same way) that
> MailScanner is doing anything.
>
>
>
> I have followed the instructions on getting it working with Sendmail on
> CentOS 7, including creating the mqueue.in folder, and adjusting the
> startup scripts….
>
>
>
> Any help here would be greatly appreciated.
>
>
>
> Thanks so much!
>
>
>
>
>
> Quintin
>
>
>
>
>
>
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: MailScanner Email Processor
> version 5.0.6 starting...
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Reading configuration file
> /etc/MailScanner/conf.d/README
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 1500 hostnames from
> the phishing whitelist
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Read 12757 hostnames from
> the phishing blacklists
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Using SpamAssassin results
> cache
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Connected to SpamAssassin
> cache database
>
> Aug 24 16:46:10 mailscanner MailScanner[2816]: Enabling SpamAssassin
> auto-whitelist functionality...
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Auto: Found virus scanners:
> clamav
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Connected to Processing
> Attempts Database
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Found 0 messages in the
> Processing Attempts Database
>
> Aug 24 16:46:13 mailscanner MailScanner[2816]: Using locktype = posix
>
> Aug 24 16:47:36 mailscanner sendmail[3002]: starting daemon (8.14.7):
> queueing at 00:15:00
>
> Aug 24 16:47:36 mailscanner sendmail[3003]: starting daemon (8.14.7): SMTP
>
> Aug 24 16:47:36 mailscanner sm-msp-queue[3020]: starting daemon (8.14.7):
> queueing at 01:00:00
>
> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: from=root,
> size=305, class=0, nrcpts=1,
> msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>,
> relay=root at localhost
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081:
> from=<root at mailscanner.snjlaw.local>, size=454, class=0, nrcpts=1,
> msgid=<20170824214855.GA3077 at mailscanner.snjlaw.local>, proto=ESMTP,
> daemon=Daemon0, relay=localhost [127.0.0.1]
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: STARTTLS=client,
> relay=[192.168.0.4], version=TLSv1/SSLv3, verify=FAIL,
> cipher=ECDHE-RSA-AES256-SHA384, bits=256/256
>
> Aug 24 16:48:55 mailscanner sendmail[3081]: v7OLmtdG003081: to=<q at snj.ca>,
> ctladdr=<root at mailscanner.snjlaw.local> (0/0), delay=00:00:00,
> xdelay=00:00:00, mailer=smtp, pri=30454, relay=[192.168.0.4] [192.168.0.4],
> dsn=2.0.0, stat=Sent (<20170824214855.GA3077 at mailscanner.snjlaw.local>
> [InternalId=13829794693333, Hostname=HONDA.snjlaw.local] Queued mail for
> delivery)
>
> Aug 24 16:48:55 mailscanner sendmail[3080]: v7OLmtAi003080: to=q at snj.ca,
> ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay,
> pri=30305, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
> (v7OLmtdG003081 Message accepted for delivery)
>
>
>
>
>
>
>
> ------------------------------
> This communication, including its attachments, if any, is confidential and
> intended only for the person(s) to whom it is addressed, and may contain
> proprietary and/or privileged material. Any unauthorized review,
> disclosure, copying, other distribution of this communication or taking of
> any action in reliance on its contents is strictly prohibited. If you have
> received this message in error, please notify SNJ immediately so that we
> may amend our records. Then, please delete this message, and its
> attachments, if any, without reading, copying or forwarding it to anyone.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> --
-- 
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170825/c41bbc16/attachment.html>


More information about the MailScanner mailing list