From Eoin.Kim at rcst.com.au  Tue May  2 02:13:45 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 2 May 2017 02:13:45 +0000
Subject: Make Spamassassin learn spam mails
Message-ID: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>

Hello all,

This might sound like a stupid question but I am having trouble with making SA learn spam emails. I have MailScanner and MailWatch running in my work. Recently, we have received some spams. Few of them were actually just delivered to receivers as a clean email. I wanted to make SA learn these clean emails as a spam but it looks like I can't do that. The ones I can do are the emails already regarded as spam. They already have {Spam?} prefix in the subject and its status already shows spam in MailWatch. Are there any ways I can achieve this? Thanks in advance.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 - The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231

[RCST logo drop shadow]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/ed276faa/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/ed276faa/attachment.jpg>

From mark at msapiro.net  Tue May  2 02:58:18 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 1 May 2017 19:58:18 -0700
Subject: Make Spamassassin learn spam mails
In-Reply-To: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
Message-ID: <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net>

On 05/01/2017 07:13 PM, Eoin Kim wrote:
> 
> This might sound like a stupid question but I am having trouble with
> making SA learn spam emails. I have MailScanner and MailWatch running in
> my work. Recently, we have received some spams. Few of them were
> actually just delivered to receivers as a clean email. I wanted to make
> SA learn these clean emails as a spam but it looks like I can?t do that.
> The ones I can do are the emails already regarded as spam. They already
> have {Spam?} prefix in the subject and its status already shows spam in
> MailWatch. Are there any ways I can achieve this? Thanks in advance.


I run SpamAssassin as "spamd" and I also have "spamc" installed. I have
a few ways of reporting messages to SpamAssassin to be learned. The mail
client I use when logged in to a shell (as a privileged user) on the
MailScanner server is mutt. I have these macros defined in mutt:

macro index H "|spamc -u postfix -L ham\r" "Spamassassin learn as ham"
macro pager H "|spamc -u postfix -L ham\r" "Spamassassin learn as ham"
macro index S "|spamc -u postfix -L spam\r" "Spamassassin learn as spam"
macro pager S "|spamc -u postfix -L spam\r" "Spamassassin learn as spam"
macro index X "|spamc -u postfix -L forget\r" "Spamassassin forget"
macro pager X "|spamc -u postfix -L forget\r" "Spamassassin forget"

Then, if I have selected a message in mutt's index or if I am viewing
the message, I can just type "H" to learn the message as ham, "S" to
learn it as spam or "X" to forget it if I learned it by mistake.

Note that -u postfix is important, but it isn't necessarily "postfix".
It is the user that MailScanner runs SpamAssassin as, normally the
configured "Run As User". Also note that -L requires spamd to be run
with the "--allow-tell" option (see man spamc).

I also have an alias in my postfix that is effectively

Spam_Report: "|spamc -u postfix -L spam  || true"

I have found however that I needed to put this in a separate alias file
with the corresponding .db (I use hashes) owned by postfix as the "-u
postfix" doesn't seem to be effective for non privileged users.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From Eoin.Kim at rcst.com.au  Tue May  2 03:14:05 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 2 May 2017 03:14:05 +0000
Subject: Make Spamassassin learn spam mails
In-Reply-To: <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net>
Message-ID: <005955c89f4e45438a2bfc68b9a69cd2@rcst.com.au>

Hi Mark,

Thanks for your reply. So, I guess the mutt is being used as an MUA for postfix user and the inbox of postfix user would be '/var/spool/postfix/incoming' something like that? So, this concept is not intercepting the incoming emails, is it? The mails will continue flowing as usual? I have to read manuals further but if you don't mind, I'd like to know the principle of this method. Thanks a lot.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Tuesday, 2 May 2017 12:58 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: Make Spamassassin learn spam mails

On 05/01/2017 07:13 PM, Eoin Kim wrote:
> 
> This might sound like a stupid question but I am having trouble with 
> making SA learn spam emails. I have MailScanner and MailWatch running 
> in my work. Recently, we have received some spams. Few of them were 
> actually just delivered to receivers as a clean email. I wanted to 
> make SA learn these clean emails as a spam but it looks like I can?t do that.
> The ones I can do are the emails already regarded as spam. They 
> already have {Spam?} prefix in the subject and its status already 
> shows spam in MailWatch. Are there any ways I can achieve this? Thanks in advance.


I run SpamAssassin as "spamd" and I also have "spamc" installed. I have a few ways of reporting messages to SpamAssassin to be learned. The mail client I use when logged in to a shell (as a privileged user) on the MailScanner server is mutt. I have these macros defined in mutt:

macro index H "|spamc -u postfix -L ham\r" "Spamassassin learn as ham"
macro pager H "|spamc -u postfix -L ham\r" "Spamassassin learn as ham"
macro index S "|spamc -u postfix -L spam\r" "Spamassassin learn as spam"
macro pager S "|spamc -u postfix -L spam\r" "Spamassassin learn as spam"
macro index X "|spamc -u postfix -L forget\r" "Spamassassin forget"
macro pager X "|spamc -u postfix -L forget\r" "Spamassassin forget"

Then, if I have selected a message in mutt's index or if I am viewing the message, I can just type "H" to learn the message as ham, "S" to learn it as spam or "X" to forget it if I learned it by mistake.

Note that -u postfix is important, but it isn't necessarily "postfix".
It is the user that MailScanner runs SpamAssassin as, normally the configured "Run As User". Also note that -L requires spamd to be run with the "--allow-tell" option (see man spamc).

I also have an alias in my postfix that is effectively

Spam_Report: "|spamc -u postfix -L spam  || true"

I have found however that I needed to put this in a separate alias file with the corresponding .db (I use hashes) owned by postfix as the "-u postfix" doesn't seem to be effective for non privileged users.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From Eoin.Kim at rcst.com.au  Tue May  2 03:31:53 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 2 May 2017 03:31:53 +0000
Subject: Make Spamassassin learn spam mails
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net> 
Message-ID: <4e85e5138d9d44e6960a12b56dce0cb3@rcst.com.au>

Sorry Mark,

I also have an alias in my postfix that is effectively

Spam_Report: "|spamc -u postfix -L spam  || true"

I have found however that I needed to put this in a separate alias file with the corresponding .db (I use hashes) owned by postfix as the "-u postfix" doesn't seem to be effective for non privileged users.

Does this mean that I have to edit the main.cf file for postfix like below?

alias_maps = hash:/etc/aliases, hash:/etc/new_file
alias_database = hash:/etc/aliases, hash:/etc/new_file

Sorry for bothering you. Cheers.

Eoin

-----Original Message-----
From: Eoin Kim 
Sent: Tuesday, 2 May 2017 1:14 PM
To: mailscanner at lists.mailscanner.info
Subject: RE: Make Spamassassin learn spam mails

Hi Mark,

Thanks for your reply. So, I guess the mutt is being used as an MUA for postfix user and the inbox of postfix user would be '/var/spool/postfix/incoming' something like that? So, this concept is not intercepting the incoming emails, is it? The mails will continue flowing as usual? I have to read manuals further but if you don't mind, I'd like to know the principle of this method. Thanks a lot.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Tuesday, 2 May 2017 12:58 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: Make Spamassassin learn spam mails

On 05/01/2017 07:13 PM, Eoin Kim wrote:
> 
> This might sound like a stupid question but I am having trouble with 
> making SA learn spam emails. I have MailScanner and MailWatch running 
> in my work. Recently, we have received some spams. Few of them were 
> actually just delivered to receivers as a clean email. I wanted to 
> make SA learn these clean emails as a spam but it looks like I can?t do that.
> The ones I can do are the emails already regarded as spam. They 
> already have {Spam?} prefix in the subject and its status already 
> shows spam in MailWatch. Are there any ways I can achieve this? Thanks in advance.


I run SpamAssassin as "spamd" and I also have "spamc" installed. I have a few ways of reporting messages to SpamAssassin to be learned. The mail client I use when logged in to a shell (as a privileged user) on the MailScanner server is mutt. I have these macros defined in mutt:

macro index H "|spamc -u postfix -L ham\r" "Spamassassin learn as ham"
macro pager H "|spamc -u postfix -L ham\r" "Spamassassin learn as ham"
macro index S "|spamc -u postfix -L spam\r" "Spamassassin learn as spam"
macro pager S "|spamc -u postfix -L spam\r" "Spamassassin learn as spam"
macro index X "|spamc -u postfix -L forget\r" "Spamassassin forget"
macro pager X "|spamc -u postfix -L forget\r" "Spamassassin forget"

Then, if I have selected a message in mutt's index or if I am viewing the message, I can just type "H" to learn the message as ham, "S" to learn it as spam or "X" to forget it if I learned it by mistake.

Note that -u postfix is important, but it isn't necessarily "postfix".
It is the user that MailScanner runs SpamAssassin as, normally the configured "Run As User". Also note that -L requires spamd to be run with the "--allow-tell" option (see man spamc).

I also have an alias in my postfix that is effectively

Spam_Report: "|spamc -u postfix -L spam  || true"

I have found however that I needed to put this in a separate alias file with the corresponding .db (I use hashes) owned by postfix as the "-u postfix" doesn't seem to be effective for non privileged users.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From mark at msapiro.net  Tue May  2 03:56:49 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 1 May 2017 20:56:49 -0700
Subject: Make Spamassassin learn spam mails
In-Reply-To: <4e85e5138d9d44e6960a12b56dce0cb3@rcst.com.au>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net>
 <4e85e5138d9d44e6960a12b56dce0cb3@rcst.com.au>
Message-ID: <c9c9002b-294f-ab3f-1ed5-e4dbd8efed57@msapiro.net>

On 05/01/2017 08:31 PM, Eoin Kim wrote:
> Mark wrote:
>> 
>> I also have an alias in my postfix that is effectively
>> 
>> Spam_Report: "|spamc -u postfix -L spam  || true"
>> 
>> I have found however that I needed to put this in a separate alias file with the corresponding .db (I use hashes) owned by postfix as the "-u postfix" doesn't seem to be effective for non privileged users.
> 
> Does this mean that I have to edit the main.cf file for postfix like below?
> 
> alias_maps = hash:/etc/aliases, hash:/etc/new_file


Yes.


> alias_database = hash:/etc/aliases, hash:/etc/new_file


No. It isn't necessary to have every alias_maps file in alias_database.
If hash:/etc/new_file is in alias_database, /etc/new_file.db will be
rebuilt either by 'newaliases' or by 'postalias /etc/new_file'. If it is
not in alias_database, /etc/new_file.db will be rebuilt only by
'postalias /etc/new_file'.

It is quite reasonable to just rebuild the .db with postalias whenever
the file changes.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From mark at msapiro.net  Tue May  2 04:11:53 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 1 May 2017 21:11:53 -0700
Subject: Make Spamassassin learn spam mails
In-Reply-To: <005955c89f4e45438a2bfc68b9a69cd2@rcst.com.au>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net>
 <005955c89f4e45438a2bfc68b9a69cd2@rcst.com.au>
Message-ID: <15911c59-f124-530b-3f34-2d2af0b5e268@msapiro.net>

On 05/01/2017 08:14 PM, Eoin Kim wrote:
> 
> Thanks for your reply. So, I guess the mutt is being used as an MUA for postfix user and the inbox of postfix user would be '/var/spool/postfix/incoming' something like that? So, this concept is not intercepting the incoming emails, is it? The mails will continue flowing as usual? I have to read manuals further but if you don't mind, I'd like to know the principle of this method. Thanks a lot.


Actually, in my case, mutt is the MUA used by a user whose name is not
root, but whose UID is 0. (Note that this is not recommended) and mutt's
inbox for that user is /var/spool/mail/username.

Note that this is probably an uncommon situation as it is probably much
more common for users to access their "inbox" via imap or pop3 from some
remote MUA. Thus, the forwarding address makes more sense. Also note
that a straight inline forward is not the best idea as it alters the
message.

I simplified things when I said

I also have an alias in my postfix that is effectively

Spam_Report: "|spamc -u postfix -L spam  || true"

It is actually

Spam_Report: "|filter|spamc -u postfix -L spam  || true"

where 'filter' is a program that reads an email message with an attached
message from stdin and writes just the attached message to stdout after
removing a few MailScanner headers. Thus, to learn a message as spam,
one forwards it as an attachment to the Spam_Report address.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From Eoin.Kim at rcst.com.au  Tue May  2 04:16:49 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 2 May 2017 04:16:49 +0000
Subject: Make Spamassassin learn spam mails
In-Reply-To: <15911c59-f124-530b-3f34-2d2af0b5e268@msapiro.net>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <f929cca3-40eb-1d95-ccb8-4f26bc79860e@msapiro.net>
 <005955c89f4e45438a2bfc68b9a69cd2@rcst.com.au>
 <15911c59-f124-530b-3f34-2d2af0b5e268@msapiro.net>
Message-ID: <00acd72aae0847ffb6e85d433946b924@rcst.com.au>

Thanks Mark,

I can spin my head a bit now. I'll have a go. Thanks again.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Tuesday, 2 May 2017 2:12 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: Make Spamassassin learn spam mails

On 05/01/2017 08:14 PM, Eoin Kim wrote:
> 
> Thanks for your reply. So, I guess the mutt is being used as an MUA for postfix user and the inbox of postfix user would be '/var/spool/postfix/incoming' something like that? So, this concept is not intercepting the incoming emails, is it? The mails will continue flowing as usual? I have to read manuals further but if you don't mind, I'd like to know the principle of this method. Thanks a lot.


Actually, in my case, mutt is the MUA used by a user whose name is not root, but whose UID is 0. (Note that this is not recommended) and mutt's inbox for that user is /var/spool/mail/username.

Note that this is probably an uncommon situation as it is probably much more common for users to access their "inbox" via imap or pop3 from some remote MUA. Thus, the forwarding address makes more sense. Also note that a straight inline forward is not the best idea as it alters the message.

I simplified things when I said

I also have an alias in my postfix that is effectively

Spam_Report: "|spamc -u postfix -L spam  || true"

It is actually

Spam_Report: "|filter|spamc -u postfix -L spam  || true"

where 'filter' is a program that reads an email message with an attached message from stdin and writes just the attached message to stdout after removing a few MailScanner headers. Thus, to learn a message as spam, one forwards it as an attachment to the Spam_Report address.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From dwhile at while.org.uk  Tue May  2 08:48:17 2017
From: dwhile at while.org.uk (David While)
Date: Tue, 2 May 2017 09:48:17 +0100
Subject: Make Spamassassin learn spam mails
In-Reply-To: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
Message-ID: <698294d5-b679-17ef-df7b-6e6d51266fe4@while.org.uk>

I do it using Mailwatch. To do this you have to configure MailScanner to 
store all mail including the non-spam messages. Then the clean spam can 
be learned using mailwatch.

David


On 02/05/2017 03:13, Eoin Kim wrote:
>
> Hello all,
>
> This might sound like a stupid question but I am having trouble with 
> making SA learn spam emails. I have MailScanner and MailWatch running 
> in my work. Recently, we have received some spams. Few of them were 
> actually just delivered to receivers as a clean email. I wanted to 
> make SA learn these clean emails as a spam but it looks like I can?t 
> do that. The ones I can do are the emails already regarded as spam. 
> They already have {Spam?} prefix in the subject and its status already 
> shows spam in MailWatch. Are there any ways I can achieve this? Thanks 
> in advance.
>
> *Eoin Kim*
>
> Systems Administrator
>
> *RCS Telecommunications *
>
> Level 1 ? The Annexe
>
> 133 Mary Street
>
> Brisbane, QLD, 4000
>
> Office: 07 3228 0843
>
> Mobile: 0419 726 231
>
> __
>
> RCST logo drop shadow
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/2779ee59/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 3384 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/2779ee59/attachment.jpe>

From Eoin.Kim at rcst.com.au  Tue May  2 10:31:30 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 2 May 2017 10:31:30 +0000
Subject: Make Spamassassin learn spam mails
In-Reply-To: <698294d5-b679-17ef-df7b-6e6d51266fe4@while.org.uk>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>,
 <698294d5-b679-17ef-df7b-6e6d51266fe4@while.org.uk>
Message-ID: <7bd23693a6284a498094ef18ce76693b@rcst.com.au>

Oh, good to know. Thanks mate, really appreciate it. So, I believe you are talking about setting Non Spam Actions? If I set it to store and deliver, does it automatically deliver the clean emails to receivers and store them for setting SA learning? What if I delete the message files on the system after delivery? Does the SA still keep what it learnt? Storing the clean messages might occupy the disk quite quickly though I guess. Thanks again.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 - The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231


________________________________
From: MailScanner <mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info> on behalf of David While <dwhile at while.org.uk>
Sent: Tuesday, 2 May 2017 6:48 PM
To: MailScanner Discussion
Subject: Re: Make Spamassassin learn spam mails


I do it using Mailwatch. To do this you have to configure MailScanner to store all mail including the non-spam messages. Then the clean spam can be learned using mailwatch.

David

On 02/05/2017 03:13, Eoin Kim wrote:

Hello all,



This might sound like a stupid question but I am having trouble with making SA learn spam emails. I have MailScanner and MailWatch running in my work. Recently, we have received some spams. Few of them were actually just delivered to receivers as a clean email. I wanted to make SA learn these clean emails as a spam but it looks like I can't do that. The ones I can do are the emails already regarded as spam. They already have {Spam?} prefix in the subject and its status already shows spam in MailWatch. Are there any ways I can achieve this? Thanks in advance.



Eoin Kim

Systems Administrator



RCS Telecommunications

Level 1 - The Annexe

133 Mary Street

Brisbane, QLD, 4000

Office:   07 3228 0843

Mobile: 0419 726 231



[RCST               logo drop shadow]





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/aa400938/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ATT00001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: ATT00001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/aa400938/attachment.jpg>

From dwhile at while.org.uk  Tue May  2 11:21:59 2017
From: dwhile at while.org.uk (David While)
Date: Tue, 2 May 2017 12:21:59 +0100
Subject: Make Spamassassin learn spam mails
In-Reply-To: <7bd23693a6284a498094ef18ce76693b@rcst.com.au>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <698294d5-b679-17ef-df7b-6e6d51266fe4@while.org.uk>
 <7bd23693a6284a498094ef18ce76693b@rcst.com.au>
Message-ID: <dd8e796a-215d-96b9-67ba-4844ee232eb2@while.org.uk>

Yes if you set store & deliver then the email is delivered and stored on 
the server.


The learning is done manually from Mailwatch so once that is done you 
can delete the meesage off the server.


David


On 02/05/2017 11:31, Eoin Kim wrote:
>
> Oh, good to know. Thanks mate, really appreciate it. So, I believe you 
> are talking about setting Non Spam Actions? If I set it to store and 
> deliver, does it automatically deliver the clean emails to receivers 
> and store them for setting SA learning? What if I delete the message 
> files on the system after delivery? Does the SA still keep what it 
> learnt? Storing the clean messages might occupy the disk quite quickly 
> though I guess. Thanks again.
>
>
> *Eoin Kim*
>
> Systems Administrator
>
> *RCS Telecommunications *
>
> Level 1 ? The Annexe
>
> 133 Mary Street
>
> Brisbane, QLD, 4000
>
> Office: 07 3228 0843
>
> Mobile: 0419 726 231
>
>
>
> ------------------------------------------------------------------------
> *From:* MailScanner 
> <mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info> on 
> behalf of David While <dwhile at while.org.uk>
> *Sent:* Tuesday, 2 May 2017 6:48 PM
> *To:* MailScanner Discussion
> *Subject:* Re: Make Spamassassin learn spam mails
>
> I do it using Mailwatch. To do this you have to configure MailScanner 
> to store all mail including the non-spam messages. Then the clean spam 
> can be learned using mailwatch.
>
> David
>
>
> On 02/05/2017 03:13, Eoin Kim wrote:
>>
>> Hello all,
>>
>> This might sound like a stupid question but I am having trouble with 
>> making SA learn spam emails. I have MailScanner and MailWatch running 
>> in my work. Recently, we have received some spams. Few of them were 
>> actually just delivered to receivers as a clean email. I wanted to 
>> make SA learn these clean emails as a spam but it looks like I can?t 
>> do that. The ones I can do are the emails already regarded as spam. 
>> They already have {Spam?} prefix in the subject and its status 
>> already shows spam in MailWatch. Are there any ways I can achieve 
>> this? Thanks in advance.
>>
>> *Eoin Kim*
>>
>> Systems Administrator
>>
>> *RCS Telecommunications *
>>
>> Level 1 ? The Annexe
>>
>> 133 Mary Street
>>
>> Brisbane, QLD, 4000
>>
>> Office: 07 3228 0843
>>
>> Mobile: 0419 726 231
>>
>> __
>>
>> RCST logo drop shadow
>>
>>
>>
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/8ebd1844/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 3384 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/8ebd1844/attachment.jpe>

From Eoin.Kim at rcst.com.au  Tue May  2 22:57:39 2017
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Tue, 2 May 2017 22:57:39 +0000
Subject: Make Spamassassin learn spam mails
In-Reply-To: <dd8e796a-215d-96b9-67ba-4844ee232eb2@while.org.uk>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <698294d5-b679-17ef-df7b-6e6d51266fe4@while.org.uk>
 <7bd23693a6284a498094ef18ce76693b@rcst.com.au>
 <dd8e796a-215d-96b9-67ba-4844ee232eb2@while.org.uk>
Message-ID: <024a6b2f896b4f7a89c97870bb7e387d@rcst.com.au>

Hi all,

Thanks for your help, really appreciate it. Got a bit more questions if you guys don't mind.


1.       So, if I make SA learn the spam/ham through the MailWatch, where does the learnt results get stored? In the bayes directory (e.g. bayes_journal, bayes_seen and so on)? My spamassassin has the following settings at the moment:
bayes_path /etc/MailScanner/bayes/bayes

bayes_file_mode 0660



2.       If I am thinking correctly regarding the #1, during the disaster recovery (thinking of the worst case), copying those bayes files would be enough? Or should I make SA learn again?

Thanks a lot.

Eoin

From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of David While
Sent: Tuesday, 2 May 2017 9:22 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Make Spamassassin learn spam mails


Yes if you set store & deliver then the email is delivered and stored on the server.



The learning is done manually from Mailwatch so once that is done you can delete the meesage off the server.



David

On 02/05/2017 11:31, Eoin Kim wrote:

Oh, good to know. Thanks mate, really appreciate it. So, I believe you are talking about setting Non Spam Actions? If I set it to store and deliver, does it automatically deliver the clean emails to receivers and store them for setting SA learning? What if I delete the message files on the system after delivery? Does the SA still keep what it learnt? Storing the clean messages might occupy the disk quite quickly though I guess. Thanks again.


Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 - The Annexe
133 Mary Street
Brisbane, QLD, 4000
Office:   07 3228 0843
Mobile: 0419 726 231

________________________________
From: MailScanner <mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info><mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info> on behalf of David While <dwhile at while.org.uk><mailto:dwhile at while.org.uk>
Sent: Tuesday, 2 May 2017 6:48 PM
To: MailScanner Discussion
Subject: Re: Make Spamassassin learn spam mails


I do it using Mailwatch. To do this you have to configure MailScanner to store all mail including the non-spam messages. Then the clean spam can be learned using mailwatch.

David

On 02/05/2017 03:13, Eoin Kim wrote:

Hello all,



This might sound like a stupid question but I am having trouble with making SA learn spam emails. I have MailScanner and MailWatch running in my work. Recently, we have received some spams. Few of them were actually just delivered to receivers as a clean email. I wanted to make SA learn these clean emails as a spam but it looks like I can't do that. The ones I can do are the emails already regarded as spam. They already have {Spam?} prefix in the subject and its status already shows spam in MailWatch. Are there any ways I can achieve this? Thanks in advance.



Eoin Kim

Systems Administrator



RCS Telecommunications

Level 1 - The Annexe

133 Mary Street

Brisbane, QLD, 4000

Office:   07 3228 0843

Mobile: 0419 726 231



[RCST logo drop shadow]













-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/6cf709a2/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170502/6cf709a2/attachment.jpg>

From mark at msapiro.net  Wed May  3 00:11:58 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 2 May 2017 17:11:58 -0700
Subject: Make Spamassassin learn spam mails
In-Reply-To: <024a6b2f896b4f7a89c97870bb7e387d@rcst.com.au>
References: <01387031eccd4f61a328f40f130b24b3@rcst.com.au>
 <698294d5-b679-17ef-df7b-6e6d51266fe4@while.org.uk>
 <7bd23693a6284a498094ef18ce76693b@rcst.com.au>
 <dd8e796a-215d-96b9-67ba-4844ee232eb2@while.org.uk>
 <024a6b2f896b4f7a89c97870bb7e387d@rcst.com.au>
Message-ID: <d29d4515-521e-b34b-6d53-d66f6e924675@msapiro.net>

On 05/02/2017 03:57 PM, Eoin Kim wrote:
> 
> 1.       So, if I make SA learn the spam/ham through the MailWatch,
> where does the learnt results get stored? In the bayes directory (e.g.
> bayes_journal, bayes_seen and so on)? My spamassassin has the following
> settings at the moment:
> bayes_path /etc/MailScanner/bayes/bayes
> 
> bayes_file_mode 0660


Yes, the files there constitute the SpamAssassin Bayes database.


> 2.       If I am thinking correctly regarding the #1, during the
> disaster recovery (thinking of the worst case), copying those bayes
> files would be enough? Or should I make SA learn again?


Yes, backup and restore of those files is sufficient.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From heino.backhaus at fink-computer.de  Thu May  4 07:57:37 2017
From: heino.backhaus at fink-computer.de (Heino Backhaus)
Date: Thu, 4 May 2017 09:57:37 +0200
Subject: Blocking password protected office documents
Message-ID: <97f980c4-8e6e-2d91-a37f-5b4e55a02ae5@fink-computer.de>

Hello List,

i'm wondering if and how to block mails with password protected office
documents. I know i could block these mails with a SA rule, searching for
password and key phrases, but that's not wanted by our customer. So
maybe the file-command and filteype.rules.conf can help.

The output of file-command looks like this:

_c3_%2ok7vd00pz08gf#4t.docx: Composite Document File V2 Document, Little
Endian, Os: Windows, Version 6.1, Code page: 1200, Locale ID: 1033, Last
Saved By: intends , Author: repels

The question is, how should an entry for this look like?
I've allready tried this:

deny    Composite     -        -

But it didn't work...

Any suggestions are welcome



-- 
Mit freundlichen Gruessen

H. Backhaus 

Fink-Computer Systeme
Heggrabenstr. 9, 35435 Wettenberg
Email: heino.backhaus at fink-computer.de
Web: www.fink-computer.de
Fax: +49-641-98444638
Fon: +49-641-98444640
UST-ID: DE151040770
HRB: 2143 Gie?en
GF: Fredi Fink

"In retrospect it becomes clear that hindsight is definitely overrated!"
  
  -Alfred E. Neumann



From bryan at kitchencloset.com  Thu May  4 20:29:51 2017
From: bryan at kitchencloset.com (Bryan)
Date: Thu, 4 May 2017 13:29:51 -0700
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
Message-ID: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>

I would imagine that it is but I'm not sure if I should just force RHEL 
7 or if there are other issues to be aware of?

Thanks!

Bryan

From mark at msapiro.net  Sat May  6 05:09:54 2017
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 5 May 2017 22:09:54 -0700
Subject: Blocking password protected office documents
In-Reply-To: <97f980c4-8e6e-2d91-a37f-5b4e55a02ae5@fink-computer.de>
References: <97f980c4-8e6e-2d91-a37f-5b4e55a02ae5@fink-computer.de>
Message-ID: <84c81b8a-5eb4-7eb0-8504-55fc701cc007@msapiro.net>

On 05/04/2017 12:57 AM, Heino Backhaus wrote:
> 
> The question is, how should an entry for this look like?
> I've allready tried this:
> 
> deny    Composite     -        -
> 
> But it didn't work...



Try with something other than '-' for the log and report text, and
ensure you're using tabs as field delimiters.q

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From michael at huntley.net  Sat May  6 15:13:59 2017
From: michael at huntley.net (Michael Huntley)
Date: Sat, 06 May 2017 08:13:59 -0700
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
In-Reply-To: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
References: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
Message-ID: <4ecb09d4690fb557617eb9d607250361@huntley.net>

I've never tried.  Please report back any issues!

On 2017-05-04 13:29, Bryan wrote:

> I would imagine that it is but I'm not sure if I should just force RHEL 7 or if there are other issues to be aware of?
> 
> Thanks!
> 
> Bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170506/ec2608ca/attachment.html>

From heino.backhaus at fink-computer.de  Tue May  9 10:55:46 2017
From: heino.backhaus at fink-computer.de (Heino Backhaus)
Date: Tue, 9 May 2017 12:55:46 +0200
Subject: Blocking password protected office documents
In-Reply-To: <84c81b8a-5eb4-7eb0-8504-55fc701cc007@msapiro.net>
References: <97f980c4-8e6e-2d91-a37f-5b4e55a02ae5@fink-computer.de>
 <84c81b8a-5eb4-7eb0-8504-55fc701cc007@msapiro.net>
Message-ID: <b7a6d7fd-58fe-da04-74d2-616c357fa47e@fink-computer.de>

Hi Mark,

sorry there seems to be a fault in my tests. Don't know what. Anyway,
today everything ist working as expected.

I'm filtering now Composit and CDFV2 with the following entrys in
filetype.rules.conf:

deny    Composite    No Password protected Office Documents  Password
protected Office Documents are often malicious
deny    CDFV2           No Password protected Office Documents  Password
protected Office Documents are often malicious

Thanks for Answering.


Am 06.05.2017 um 07:09 schrieb Mark Sapiro:
> On 05/04/2017 12:57 AM, Heino Backhaus wrote:
>> The question is, how should an entry for this look like?
>> I've allready tried this:
>>
>> deny    Composite     -        -
>>
>> But it didn't work...
>
>
> Try with something other than '-' for the log and report text, and
> ensure you're using tabs as field delimiters.q
>



From alkazee at gmail.com  Tue May  9 15:07:29 2017
From: alkazee at gmail.com (Filipe Ferreira)
Date: Tue, 9 May 2017 16:07:29 +0100
Subject: Enable clamdscan instead clamscan
Message-ID: <CAJ3fgRXWTDVEkexojk7+sN6pthZNPU+YV9SqOnXtrPCVHc3Jzw@mail.gmail.com>

Hi,

I have MailScanner 4.84.3, clamav 0.99 and spamassassin 3.3.1 and I'm
trying to block office files with macros. I already enable the
"OLE2BlockMacros"
in clamd.conf and I tested with the clamdscan. The file was marked as
infected. However, my mailscanner clamav wrapper is using clamscan and if I
scan the file with it, the file is marked as clean. I'm trying to change
the wrapper to use clamdscan instead. Can someone help me with it?

Best Regards,
Jos? Ferreira.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170509/0bbc15e1/attachment.html>

From jerry.benton at mailborder.com  Tue May  9 15:08:42 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Tue, 9 May 2017 11:08:42 -0400
Subject: Enable clamdscan instead clamscan
In-Reply-To: <CAJ3fgRXWTDVEkexojk7+sN6pthZNPU+YV9SqOnXtrPCVHc3Jzw@mail.gmail.com>
References: <CAJ3fgRXWTDVEkexojk7+sN6pthZNPU+YV9SqOnXtrPCVHc3Jzw@mail.gmail.com>
Message-ID: <AFD62983-B6CE-4200-BE77-EE4FC5BF6756@mailborder.com>

Do not use the wrapper if you have the clam daemon installed. Use clamd in your config. 

-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245



> On May 9, 2017, at 11:07 AM, Filipe Ferreira <alkazee at gmail.com> wrote:
> 
> Hi,
> 
> I have MailScanner 4.84.3, clamav 0.99 and spamassassin 3.3.1 and I'm trying to block office files with macros. I already enable the "OLE2BlockMacros" in clamd.conf and I tested with the clamdscan. The file was marked as infected. However, my mailscanner clamav wrapper is using clamscan and if I scan the file with it, the file is marked as clean. I'm trying to change the wrapper to use clamdscan instead. Can someone help me with it?
> 
> Best Regards,
> Jos? Ferreira.
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170509/515416f7/attachment.html>

From alkazee at gmail.com  Tue May  9 15:26:31 2017
From: alkazee at gmail.com (Filipe Ferreira)
Date: Tue, 9 May 2017 16:26:31 +0100
Subject: Enable clamdscan instead clamscan
In-Reply-To: <AFD62983-B6CE-4200-BE77-EE4FC5BF6756@mailborder.com>
References: <CAJ3fgRXWTDVEkexojk7+sN6pthZNPU+YV9SqOnXtrPCVHc3Jzw@mail.gmail.com>
 <AFD62983-B6CE-4200-BE77-EE4FC5BF6756@mailborder.com>
Message-ID: <CAJ3fgRXw=JHkwsZPfQWRao4i83JCBqBGL=1Hu8NNdmckUfVwVQ@mail.gmail.com>

Hi Jerry,

I changed the virush scanning to clamd and the incoming dir group to the
same group as clamd runs and I was able to identify the office as infected
and blocked the email.


Thanks a lot for the help.

Best Regards,
Jos? Ferreira.



On Tue, May 9, 2017 at 4:08 PM, Jerry Benton <jerry.benton at mailborder.com>
wrote:

> Do not use the wrapper if you have the clam daemon installed. Use clamd in
> your config.
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245 <(844)%20436-6245>
>
>
>
> On May 9, 2017, at 11:07 AM, Filipe Ferreira <alkazee at gmail.com> wrote:
>
> Hi,
>
> I have MailScanner 4.84.3, clamav 0.99 and spamassassin 3.3.1 and I'm
> trying to block office files with macros. I already enable the "OLE2BlockMacros"
> in clamd.conf and I tested with the clamdscan. The file was marked as
> infected. However, my mailscanner clamav wrapper is using clamscan and if I
> scan the file with it, the file is marked as clean. I'm trying to change
> the wrapper to use clamdscan instead. Can someone help me with it?
>
> Best Regards,
> Jos? Ferreira.
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170509/dd8d3db0/attachment.html>

From phil.randal at hoopleltd.co.uk  Tue May  9 15:35:57 2017
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Tue, 9 May 2017 15:35:57 +0000
Subject: Enable clamdscan instead clamscan
In-Reply-To: <AFD62983-B6CE-4200-BE77-EE4FC5BF6756@mailborder.com>
References: <CAJ3fgRXWTDVEkexojk7+sN6pthZNPU+YV9SqOnXtrPCVHc3Jzw@mail.gmail.com>
 <AFD62983-B6CE-4200-BE77-EE4FC5BF6756@mailborder.com>
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B85F5836057@HC-EXMBX04.herefordshire.gov.uk>

While we?re on the subject of ClamAV, Mail::ClamAV has been obsolete for aeons and really should be excised from MailScanner v5 future builds.

Changes to install script, virus scanners conf, and SweepViruses.pm (and maybe a few other places).

Phil

From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 09 May 2017 16:09
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Enable clamdscan instead clamscan

Do not use the wrapper if you have the clam daemon installed. Use clamd in your config.

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 - 844-436-6245


On May 9, 2017, at 11:07 AM, Filipe Ferreira <alkazee at gmail.com<mailto:alkazee at gmail.com>> wrote:

Hi,

I have MailScanner 4.84.3, clamav 0.99 and spamassassin 3.3.1 and I'm trying to block office files with macros. I already enable the "OLE2BlockMacros" in clamd.conf and I tested with the clamdscan. The file was marked as infected. However, my mailscanner clamav wrapper is using clamscan and if I scan the file with it, the file is marked as clean. I'm trying to change the wrapper to use clamdscan instead. Can someone help me with it?

Best Regards,
Jos? Ferreira.




--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170509/b46bdd56/attachment.html>

From daniel at brunt.ca  Tue May  9 21:37:23 2017
From: daniel at brunt.ca (Daniel Brunt)
Date: Tue, 9 May 2017 21:37:23 +0000
Subject: Blocking password protected office documents (Heino Backhaus)
Message-ID: <YQBPR01MB003424BE15A121B6136786F9A2EF0@YQBPR01MB0034.CANPRD01.PROD.OUTLOOK.COM>

Heino,

Back in January/February I tried blocking CDF V2 but found it also blocked a lot of non-password protected documents.
I was using :
	deny      CDF V2 Document           No password-protected documents        No password-protected documents allowed

But both password-protected and OLE file types were blocked by "CDF V2 Document".  
"CDF" = Compound Document Format "and is related to OLE/COM. It refers to linking and embedding objects, for example, Excel charts in Word documents."

I could not find a way to block just password-protected documents.  If your findings contradict mine, I would be curious to know more...

Daniel


----------------------------------------------------------------------

Message: 1
Date: Tue, 9 May 2017 12:55:46 +0200
From: Heino Backhaus <heino.backhaus at fink-computer.de>
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Blocking password protected office documents
Message-ID: <b7a6d7fd-58fe-da04-74d2-616c357fa47e at fink-computer.de>
Content-Type: text/plain; charset="windows-1252"

Hi Mark,

sorry there seems to be a fault in my tests. Don't know what. Anyway, today everything is working as expected.

I'm filtering now Composite and CDFV2 with the following entrys in
filetype.rules.conf:

deny    Composite    No Password protected Office Documents  Password
protected Office Documents are often malicious
deny    CDFV2           No Password protected Office Documents  Password
protected Office Documents are often malicious

Thanks for Answering.


Am 06.05.2017 um 07:09 schrieb Mark Sapiro:
> On 05/04/2017 12:57 AM, Heino Backhaus wrote:
>> The question is, how should an entry for this look like?
>> I've allready tried this:
>>
>> deny    Composite     -        -
>>
>> But it didn't work...
>
>
> Try with something other than '-' for the log and report text, and 
> ensure you're using tabs as field delimiters.q
>


From bryan at kitchencloset.com  Wed May 10 01:38:05 2017
From: bryan at kitchencloset.com (Bryan)
Date: Tue, 9 May 2017 18:38:05 -0700
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
In-Reply-To: <4ecb09d4690fb557617eb9d607250361@huntley.net>
References: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
 <4ecb09d4690fb557617eb9d607250361@huntley.net>
Message-ID: <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>

It failed to work, most notably it did not acknowledge the Amazon EPEL 
repo and everything around CPAN completely failed.

I'm going to pull the script apart and step by step try to do this 
manually to see if I can get things working that way.


On 5/6/2017 8:13 AM, Michael Huntley wrote:
>
> I've never tried.  Please report back any issues!
>
>
> On 2017-05-04 13:29, Bryan wrote:
>
>> I would imagine that it is but I'm not sure if I should just force 
>> RHEL 7 or if there are other issues to be aware of?
>>
>> Thanks!
>>
>> Bryan
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170509/0f0a3f73/attachment.html>

From michael at huntley.net  Wed May 10 16:40:38 2017
From: michael at huntley.net (Michael Huntley)
Date: Wed, 10 May 2017 09:40:38 -0700
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
In-Reply-To: <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>
References: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
 <4ecb09d4690fb557617eb9d607250361@huntley.net>
 <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>
Message-ID: <239067873b90e7efac44bfde71ac5c0e@huntley.net>

Disappointing but OK.

On 2017-05-09 18:38, Bryan wrote:

> It failed to work, most notably it did not acknowledge the Amazon EPEL repo and everything around CPAN completely failed.
> 
> I'm going to pull the script apart and step by step try to do this manually to see if I can get things working that way.
> 
> On 5/6/2017 8:13 AM, Michael Huntley wrote: 
> 
> I've never tried.  Please report back any issues!
> 
> On 2017-05-04 13:29, Bryan wrote: 
> I would imagine that it is but I'm not sure if I should just force RHEL 7 or if there are other issues to be aware of?
> 
> Thanks!
> 
> Bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170510/d263c6e0/attachment.html>

From jerry.benton at mailborder.com  Wed May 10 16:44:59 2017
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 10 May 2017 12:44:59 -0400
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
In-Reply-To: <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>
References: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
 <4ecb09d4690fb557617eb9d607250361@huntley.net>
 <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>
Message-ID: <465921F8-BFE6-473B-BF89-CD48B8549B7E@mailborder.com>

It doesn?t matter what the EPEL repo is called as long as the packages are available. 

CPAN should work on any OS, but you need to install those tools if they are not there. (perl-CPAN)

-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245



> On May 9, 2017, at 9:38 PM, Bryan <bryan at kitchencloset.com> wrote:
> 
> It failed to work, most notably it did not acknowledge the Amazon EPEL repo and everything around CPAN completely failed.
> 
> I'm going to pull the script apart and step by step try to do this manually to see if I can get things working that way.
> 
> 
> On 5/6/2017 8:13 AM, Michael Huntley wrote:
>> I've never tried.  Please report back any issues!
>> 
>>  
>> 
>> On 2017-05-04 13:29, Bryan wrote:
>> 
>>> I would imagine that it is but I'm not sure if I should just force RHEL 7 or if there are other issues to be aware of?
>>> 
>>> Thanks!
>>> 
>>> Bryan
>> 
>> 
>> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170510/fba52559/attachment.html>

From bryan at kitchencloset.com  Wed May 10 20:01:00 2017
From: bryan at kitchencloset.com (Bryan)
Date: Wed, 10 May 2017 13:01:00 -0700
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
In-Reply-To: <465921F8-BFE6-473B-BF89-CD48B8549B7E@mailborder.com>
References: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
 <4ecb09d4690fb557617eb9d607250361@huntley.net>
 <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>
 <465921F8-BFE6-473B-BF89-CD48B8549B7E@mailborder.com>
Message-ID: <4fdbd86e-05ba-d65f-7fd1-05cd0758b5f5@kitchencloset.com>

Ok, so I think I have everything but CPAN sorted out. I can get the 
install.sh to complete but the CPAN install is still freaking out.

Also, I've changed up to the 2017.03 AMI since I discovered that is now 
available. It's looking as if it is RHEL 6 compatible.

Here is the diff of my hack at the install.sh

---------------------
[@ MailScanner-5.0.3-7]# diff install.sh install.sh.orig
47c47
< if [ ! -f '/etc/system-release' ]; then
---
 > if [ ! -f '/etc/redhat-release' ]; then
62,63d61
<       elif grep -qs 'Amazon Linux AMI release 2017.03' 
/etc/system-release ; then
<                       RHEL=6
139c137
<     EPELOPTION="epel";
---
 >     EPELOPTION="epel-release";
143c141
<     EPELOPTION="epel";
---
 >     EPELOPTION="epel-release";


Since the CPAN section is erroring in the install, I pulled out just the 
yum install sequence for the CPAN elements and ran it. Here is the 
output. Thoughts? (note, CPAN was not installed by default and it isn't 
getting installed with the script. So I manually did a "yum install 
cpan" as seperately.)

---------------------
[@ ~]# yum install perl-Archive-Tar perl-Archive-Zip 
perl-Compress-Raw-Zlib perl-Compress-Zlib perl-Convert-BinHex 
perl-Convert-TNEF perl-CPAN perl-Data-Dump perl-DBD-SQLite perl-DBI 
perl-Digest-HMAC perl-Digest-SHA1 perl-Env perl-ExtUtils-MakeMaker 
perl-File-ShareDir-Install perl-File-Temp perl-Filesys-Df 
perl-Getopt-Long perl-IO-String perl-IO-stringy perl-HTML-Parser 
perl-HTML-Tagset perl-Inline perl-IO-Zlib perl-Mail-DKIM 
perl-Mail-IMAPClient perl-Mail-SPF perl-MailTools perl-MIME-tools 
perl-Net-CIDR perl-Net-DNS perl-Net-DNS-Resolver-Programmable 
perl-Net-IP perl-OLE-Storage_Lite perl-Pod-Escapes perl-Pod-Simple 
perl-Scalar-List-Utils perl-Storable perl-Pod-Escapes perl-Pod-Simple 
perl-Razor-Agent perl-Sys-Hostname-Long perl-Sys-SigAction 
perl-Test-Manifest perl-Test-Pod perl-Time-HiRes perl-TimeDate perl-URI 
perl-YAML pyzor re2c
Loaded plugins: priorities, update-motd, upgrade-helper
amzn-main                                                             | 
2.1 kB  00:00:00
amzn-updates                                                          | 
2.3 kB  00:00:00
1004 packages excluded due to repository priority protections
Package perl-CPAN-1.9800-286.38.amzn1.noarch already installed and 
latest version
Package perl-Digest-HMAC-1.03-5.7.amzn1.noarch already installed and 
latest version
Package perl-ExtUtils-MakeMaker-6.68-3.5.amzn1.noarch already installed 
and latest version
No package perl-File-ShareDir-Install available.
Package perl-File-Temp-0.23.01-3.5.amzn1.noarch already installed and 
latest version
Package perl-Getopt-Long-2.40-2.5.amzn1.noarch already installed and 
latest version
Package 1:perl-Pod-Escapes-1.04-286.38.amzn1.noarch already installed 
and latest version
Package 1:perl-Pod-Simple-3.28-4.6.amzn1.noarch already installed and 
latest version
Package perl-Scalar-List-Utils-1.27-248.5.amzn1.x86_64 already installed 
and latest version
Package perl-Storable-2.45-3.5.amzn1.x86_64 already installed and latest 
version
Package 1:perl-Pod-Escapes-1.04-286.38.amzn1.noarch already installed 
and latest version
Package 1:perl-Pod-Simple-3.28-4.6.amzn1.noarch already installed and 
latest version
Package 4:perl-Time-HiRes-1.9725-272.5.amzn1.x86_64 already installed 
and latest version
Resolving Dependencies
--> Running transaction check
---> Package perl-Archive-Tar.noarch 0:1.92-2.5.amzn1 will be installed
--> Processing Dependency: perl(Package::Constants) for package: 
perl-Archive-Tar-1.92-2.5.amzn1.noarch
---> Package perl-Archive-Zip.noarch 0:1.30-11.7.amzn1 will be installed
---> Package perl-Compress-Raw-Zlib.x86_64 1:2.061-4.1.amzn1 will be 
installed
---> Package perl-Convert-BinHex.noarch 0:1.119-10.1.5.amzn1 will be 
installed
---> Package perl-Convert-TNEF.noarch 0:0.18-1.1.amzn1 will be installed
---> Package perl-DBD-SQLite.x86_64 0:1.39-3.9.amzn1 will be installed
---> Package perl-DBI.x86_64 0:1.627-4.8.amzn1 will be installed
--> Processing Dependency: perl(RPC::PlClient) >= 0.2000 for package: 
perl-DBI-1.627-4.8.amzn1.x86_64
--> Processing Dependency: perl(RPC::PlServer) >= 0.2001 for package: 
perl-DBI-1.627-4.8.amzn1.x86_64
---> Package perl-Data-Dump.noarch 0:1.21-4.2.amzn1 will be installed
---> Package perl-Digest-SHA1.x86_64 0:2.13-9.7.amzn1 will be installed
---> Package perl-Env.noarch 0:1.04-2.5.amzn1 will be installed
---> Package perl-Filesys-Df.x86_64 0:0.92-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Filesys-Df-0.92-5.el6.x86_64
---> Package perl-HTML-Parser.x86_64 0:3.71-4.7.amzn1 will be installed
--> Processing Dependency: perl(HTTP::Headers) for package: 
perl-HTML-Parser-3.71-4.7.amzn1.x86_64
---> Package perl-HTML-Tagset.noarch 0:3.20-15.7.amzn1 will be installed
---> Package perl-IO-Compress.noarch 0:2.061-2.12.amzn1 will be installed
--> Processing Dependency: perl(Compress::Raw::Bzip2) >= 2.061 for 
package: perl-IO-Compress-2.061-2.12.amzn1.noarch
---> Package perl-IO-String.noarch 0:1.08-19.7.amzn1 will be installed
---> Package perl-IO-Zlib.noarch 1:1.10-286.38.amzn1 will be installed
---> Package perl-IO-stringy.noarch 0:2.110-22.7.amzn1 will be installed
---> Package perl-Inline.noarch 0:0.53-4.5.amzn1 will be installed
--> Processing Dependency: perl(Parse::RecDescent) for package: 
perl-Inline-0.53-4.5.amzn1.noarch
---> Package perl-MIME-tools.noarch 0:5.505-1.8.amzn1 will be installed
---> Package perl-Mail-DKIM.noarch 0:0.39-8.7.amzn1 will be installed
--> Processing Dependency: perl(Crypt::OpenSSL::RSA) for package: 
perl-Mail-DKIM-0.39-8.7.amzn1.noarch
---> Package perl-Mail-IMAPClient.noarch 0:3.34-1.2.amzn1 will be installed
---> Package perl-Mail-SPF.noarch 0:2.8.0-4.5.amzn1 will be installed
--> Processing Dependency: perl(NetAddr::IP) for package: 
perl-Mail-SPF-2.8.0-4.5.amzn1.noarch
--> Processing Dependency: perl(version) for package: 
perl-Mail-SPF-2.8.0-4.5.amzn1.noarch
--> Processing Dependency: perl(Error) for package: 
perl-Mail-SPF-2.8.0-4.5.amzn1.noarch
---> Package perl-MailTools.noarch 0:2.12-2.7.amzn1 will be installed
--> Processing Dependency: perl(Net::SMTP::SSL) for package: 
perl-MailTools-2.12-2.7.amzn1.noarch
---> Package perl-Net-CIDR.noarch 0:0.14-1.4.amzn1 will be installed
---> Package perl-Net-DNS.x86_64 0:0.72-5.10.amzn1 will be installed
---> Package perl-Net-DNS-Resolver-Programmable.noarch 
0:0.003-15.5.amzn1 will be installed
---> Package perl-Net-IP.noarch 0:1.25-13.5.amzn1 will be installed
---> Package perl-OLE-Storage_Lite.noarch 0:0.19-9.2.amzn1 will be installed
---> Package perl-Razor-Agent.x86_64 0:2.85-15.1.amzn1 will be installed
--> Processing Dependency: perl(Sys::Syslog) for package: 
perl-Razor-Agent-2.85-15.1.amzn1.x86_64
---> Package perl-Sys-Hostname-Long.noarch 0:1.4-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-Hostname-Long-1.4-5.el6.noarch
---> Package perl-Sys-SigAction.noarch 0:0.11-2.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-SigAction-0.11-2.el6.noarch
---> Package perl-Test-Manifest.noarch 0:1.23-2.7.amzn1 will be installed
---> Package perl-Test-Pod.noarch 0:1.48-3.9.amzn1 will be installed
--> Processing Dependency: perl(Test::More) >= 0.62 for package: 
perl-Test-Pod-1.48-3.9.amzn1.noarch
--> Processing Dependency: perl(Test::Builder) for package: 
perl-Test-Pod-1.48-3.9.amzn1.noarch
---> Package perl-TimeDate.noarch 1:2.30-2.7.amzn1 will be installed
---> Package perl-URI.noarch 0:1.60-9.8.amzn1 will be installed
--> Processing Dependency: perl(Business::ISBN) for package: 
perl-URI-1.60-9.8.amzn1.noarch
---> Package perl-YAML.noarch 0:0.84-5.7.amzn1 will be installed
---> Package pyzor.noarch 0:0.5.0-3.el6 will be installed
--> Processing Dependency: python(abi) = 2.6 for package: 
pyzor-0.5.0-3.el6.noarch
---> Package re2c.x86_64 0:0.13.5-1.2.amzn1 will be installed
--> Running transaction check
---> Package perl-Business-ISBN.noarch 0:2.06-2.7.amzn1 will be installed
--> Processing Dependency: perl(Business::ISBN::Data) >= 20120719.001 
for package: perl-Business-ISBN-2.06-2.7.amzn1.noarch
---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.061-3.11.amzn1 will be 
installed
---> Package perl-Crypt-OpenSSL-RSA.x86_64 0:0.28-7.8.amzn1 will be 
installed
--> Processing Dependency: perl(Crypt::OpenSSL::Bignum) for package: 
perl-Crypt-OpenSSL-RSA-0.28-7.8.amzn1.x86_64
--> Processing Dependency: perl(Crypt::OpenSSL::Random) for package: 
perl-Crypt-OpenSSL-RSA-0.28-7.8.amzn1.x86_64
---> Package perl-Error.noarch 1:0.17020-2.9.amzn1 will be installed
---> Package perl-Filesys-Df.x86_64 0:0.92-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Filesys-Df-0.92-5.el6.x86_64
---> Package perl-HTTP-Message.noarch 0:6.06-6.10.amzn1 will be installed
--> Processing Dependency: perl(Encode::Locale) >= 1 for package: 
perl-HTTP-Message-6.06-6.10.amzn1.noarch
--> Processing Dependency: perl(HTTP::Date) >= 6 for package: 
perl-HTTP-Message-6.06-6.10.amzn1.noarch
--> Processing Dependency: perl(LWP::MediaTypes) >= 6 for package: 
perl-HTTP-Message-6.06-6.10.amzn1.noarch
--> Processing Dependency: perl(IO::HTML) for package: 
perl-HTTP-Message-6.06-6.10.amzn1.noarch
---> Package perl-Net-SMTP-SSL.noarch 0:1.01-13.7.amzn1 will be installed
--> Processing Dependency: perl(IO::Socket::SSL) for package: 
perl-Net-SMTP-SSL-1.01-13.7.amzn1.noarch
---> Package perl-NetAddr-IP.x86_64 0:4.069-3.8.amzn1 will be installed
---> Package perl-Package-Constants.noarch 1:0.02-286.38.amzn1 will be 
installed
---> Package perl-Parse-RecDescent.noarch 0:1.967009-5.13.amzn1 will be 
installed
---> Package perl-PlRPC.noarch 0:0.2020-14.7.amzn1 will be installed
--> Processing Dependency: perl(Net::Daemon) >= 0.13 for package: 
perl-PlRPC-0.2020-14.7.amzn1.noarch
--> Processing Dependency: perl(Net::Daemon::Test) for package: 
perl-PlRPC-0.2020-14.7.amzn1.noarch
--> Processing Dependency: perl(Net::Daemon::Log) for package: 
perl-PlRPC-0.2020-14.7.amzn1.noarch
---> Package perl-Sys-Hostname-Long.noarch 0:1.4-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-Hostname-Long-1.4-5.el6.noarch
---> Package perl-Sys-SigAction.noarch 0:0.11-2.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-SigAction-0.11-2.el6.noarch
---> Package perl-Sys-Syslog.x86_64 0:0.33-3.6.amzn1 will be installed
---> Package perl-Test-Simple.noarch 0:0.98-243.6.amzn1 will be installed
---> Package perl-version.x86_64 3:0.99.07-2.6.amzn1 will be installed
---> Package python26.x86_64 0:2.6.9-2.88.amzn1 will be installed
--> Processing Dependency: libpython2.6.so.1.0()(64bit) for package: 
python26-2.6.9-2.88.amzn1.x86_64
--> Running transaction check
---> Package perl-Business-ISBN-Data.noarch 0:20120719.001-2.7.amzn1 
will be installed
---> Package perl-Crypt-OpenSSL-Bignum.x86_64 0:0.04-18.8.amzn1 will be 
installed
---> Package perl-Crypt-OpenSSL-Random.x86_64 0:0.04-21.8.amzn1 will be 
installed
---> Package perl-Encode-Locale.noarch 0:1.03-5.8.amzn1 will be installed
---> Package perl-Filesys-Df.x86_64 0:0.92-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Filesys-Df-0.92-5.el6.x86_64
---> Package perl-HTTP-Date.noarch 0:6.02-8.8.amzn1 will be installed
---> Package perl-IO-HTML.noarch 0:1.00-2.5.amzn1 will be installed
---> Package perl-IO-Socket-SSL.noarch 0:1.94-3.13.amzn1 will be installed
--> Processing Dependency: perl(Net::SSLeay) >= 1.21 for package: 
perl-IO-Socket-SSL-1.94-3.13.amzn1.noarch
--> Processing Dependency: perl(IO::Socket::IP) >= 0.20 for package: 
perl-IO-Socket-SSL-1.94-3.13.amzn1.noarch
--> Processing Dependency: perl(Net::LibIDN) for package: 
perl-IO-Socket-SSL-1.94-3.13.amzn1.noarch
--> Processing Dependency: perl(Net::SSLeay) for package: 
perl-IO-Socket-SSL-1.94-3.13.amzn1.noarch
---> Package perl-LWP-MediaTypes.noarch 0:6.02-2.9.amzn1 will be installed
---> Package perl-Net-Daemon.noarch 0:0.48-5.5.amzn1 will be installed
---> Package perl-Sys-Hostname-Long.noarch 0:1.4-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-Hostname-Long-1.4-5.el6.noarch
---> Package perl-Sys-SigAction.noarch 0:0.11-2.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-SigAction-0.11-2.el6.noarch
---> Package python26-libs.x86_64 0:2.6.9-2.88.amzn1 will be installed
--> Running transaction check
---> Package perl-Filesys-Df.x86_64 0:0.92-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Filesys-Df-0.92-5.el6.x86_64
---> Package perl-IO-Socket-IP.noarch 0:0.21-4.5.amzn1 will be installed
---> Package perl-Net-LibIDN.x86_64 0:0.12-15.6.amzn1 will be installed
---> Package perl-Net-SSLeay.x86_64 0:1.65-2.10.amzn1 will be installed
---> Package perl-Sys-Hostname-Long.noarch 0:1.4-5.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-Hostname-Long-1.4-5.el6.noarch
---> Package perl-Sys-SigAction.noarch 0:0.11-2.el6 will be installed
--> Processing Dependency: perl(:MODULE_COMPAT_5.10.1) for package: 
perl-Sys-SigAction-0.11-2.el6.noarch
--> Finished Dependency Resolution
Error: Package: perl-Sys-Hostname-Long-1.4-5.el6.noarch (epel)
            Requires: perl(:MODULE_COMPAT_5.10.1)
Error: Package: perl-Sys-SigAction-0.11-2.el6.noarch (epel)
            Requires: perl(:MODULE_COMPAT_5.10.1)
Error: Package: perl-Filesys-Df-0.92-5.el6.x86_64 (epel)
            Requires: perl(:MODULE_COMPAT_5.10.1)
  You could try using --skip-broken to work around the problem
** Found 21 pre-existing rpmdb problem(s), 'yum check' output follows:
MailScanner-5.0.3-7.noarch has missing requires of perl(Archive::Zip)
MailScanner-5.0.3-7.noarch has missing requires of perl(Compress::Zlib)
MailScanner-5.0.3-7.noarch has missing requires of perl(DBI)
MailScanner-5.0.3-7.noarch has missing requires of perl(Env)
MailScanner-5.0.3-7.noarch has missing requires of perl(Filesys::Df)
MailScanner-5.0.3-7.noarch has missing requires of perl(HTML::Entities)
MailScanner-5.0.3-7.noarch has missing requires of perl(HTML::Parser)
MailScanner-5.0.3-7.noarch has missing requires of perl(HTML::TokeParser)
MailScanner-5.0.3-7.noarch has missing requires of perl(IO::Stringy)
MailScanner-5.0.3-7.noarch has missing requires of perl(LWP::UserAgent)
MailScanner-5.0.3-7.noarch has missing requires of 
perl(MIME::Decoder::BinHex)
MailScanner-5.0.3-7.noarch has missing requires of perl(MIME::Decoder::UU)
MailScanner-5.0.3-7.noarch has missing requires of perl(MIME::Head)
MailScanner-5.0.3-7.noarch has missing requires of perl(MIME::Parser)
MailScanner-5.0.3-7.noarch has missing requires of perl(MIME::WordDecoder)
MailScanner-5.0.3-7.noarch has missing requires of perl(Net::CIDR)
MailScanner-5.0.3-7.noarch has missing requires of perl(Net::DNS::Resolver)
MailScanner-5.0.3-7.noarch has missing requires of perl(OLE::Storage_Lite)
MailScanner-5.0.3-7.noarch has missing requires of perl(Sys::Hostname::Long)
MailScanner-5.0.3-7.noarch has missing requires of perl(Sys::SigAction)
MailScanner-5.0.3-7.noarch has missing requires of perl(Sys::Syslog)
[@ ~]#

---------------------

On 5/10/2017 9:44 AM, Jerry Benton wrote:
> It doesn?t matter what the EPEL repo is called as long as the packages 
> are available.
>
> CPAN should work on any OS, but you need to install those tools if 
> they are not there. (perl-CPAN)
>
> -
> Jerry Benton
> www.mailborder.com <http://www.mailborder.com>
> +1 - 844-436-6245
>
>
>
>> On May 9, 2017, at 9:38 PM, Bryan <bryan at kitchencloset.com 
>> <mailto:bryan at kitchencloset.com>> wrote:
>>
>> It failed to work, most notably it did not acknowledge the Amazon 
>> EPEL repo and everything around CPAN completely failed.
>>
>> I'm going to pull the script apart and step by step try to do this 
>> manually to see if I can get things working that way.
>>
>>
>> On 5/6/2017 8:13 AM, Michael Huntley wrote:
>>>
>>> I've never tried.  Please report back any issues!
>>>
>>>
>>> On 2017-05-04 13:29, Bryan wrote:
>>>
>>>> I would imagine that it is but I'm not sure if I should just force 
>>>> RHEL 7 or if there are other issues to be aware of?
>>>>
>>>> Thanks!
>>>>
>>>> Bryan
>>>
>>>
>>
>>
>>
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info 
>> <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170510/0d9cc52a/attachment.html>

From bryan at kitchencloset.com  Wed May 10 22:40:42 2017
From: bryan at kitchencloset.com (Bryan)
Date: Wed, 10 May 2017 15:40:42 -0700
Subject: Is installing on Amazon Linux AMI (2016.09) supported?
In-Reply-To: <4fdbd86e-05ba-d65f-7fd1-05cd0758b5f5@kitchencloset.com>
References: <6225f1d8-b659-58d7-8218-9908b469a444@kitchencloset.com>
 <4ecb09d4690fb557617eb9d607250361@huntley.net>
 <480f69b1-c60e-874d-ee2e-9a1e1ae8d11a@kitchencloset.com>
 <465921F8-BFE6-473B-BF89-CD48B8549B7E@mailborder.com>
 <4fdbd86e-05ba-d65f-7fd1-05cd0758b5f5@kitchencloset.com>
Message-ID: <e70ad7d9-bd6c-612d-4288-3bae71f6c29c@kitchencloset.com>

Quick update...

So I went back and ran install.sh again after everything I mentioned in 
my last message and this time it looks like it downloaded and 
individually compiled all of the missing CPAN modules, then completed 
the install.

I'm finishing up some other configuration items for Postfix and then I 
will try and test it out. I'll send in another update as soon as I have 
more info.

Bryan

From roger.meier at 4synergy.com  Thu May 11 10:46:02 2017
From: roger.meier at 4synergy.com (Roger Meier)
Date: Thu, 11 May 2017 12:46:02 +0200
Subject: CustomFunction to Modify Subject based on message
Message-ID: <9ab2d2dd-130d-8785-9224-75d3692f71e6@4synergy.com>

Hi their,

I wan't to add a customscript which modifies the subject based on
content in the email.

The reason for this are two points of some new spam/fake mails which are
going around on our
customers.

the first one are mails which look like they come from a contact of one
of our customers, but in
the body is a url to a maleware site. most of the url's aren't currently
in the phishing list or on
other url blacklists. But all of this mails have one part which had
always the same structure.

On some clients it looks like:
From: a.wellknown-customer at domain.com <unknown at somedomain.de>

On the message header their is the first part not visible, because its
UTF-8 mime encoded, and looks like:

=?UTF-8?B?ZnJlZHkud29sZkB3b2xmLWVsZWt0cm8uY2g=?= <unknown at somedomain.de>

I wan't now to implement a custom function for each message which look
if this is a mail of this format,
and if yes, then decode the first part and compare it with the second
part if both are email addresses.
If they are not the same i wan't to modify the message for add some
stuff to the subject, modify the from
mail part and/or the spam score.

My first try as to use the config paramters "Scanned Modify Subject"
together with "Scanned Subject Text",
but when i add a custom script to "Scanned Subject Text" i can modify
the subject with text i wan't but i
don't receive any message content with:

 my($message) = @_;

Another part is to write some algorithm to detect mails like:
https://www.govcert.admin.ch/blog/28/the-rise-of-dridex-and-the-role-of-esps

when they are new and not already known by phishing and maleware lists.

Greetings
Roger Meier

From phil.randal at hoopleltd.co.uk  Thu May 18 12:03:49 2017
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Thu, 18 May 2017 12:03:49 +0000
Subject: Any chance of a new release?
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B85F586BEB0@HC-EXMBX04.herefordshire.gov.uk>

Is there any chance of a new release incorporating all the changes up to date?

Cheers,

Phil


Phil Randal - Infrastructure Engineer
Hoople Ltd | Plough Lane Offices | Plough Lane | Hereford | HR4 0LE
Tel: 01432 260415
Email: phil.randal at hoopleltd.co.uk<mailto:phil.randal at hoopleltd.co.uk>
Website: www.hoopleltd.co.uk<http://www.hoopleltd.co.uk/>

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170518/f178856e/attachment.html>

From iversons at rushville.k12.in.us  Sat May 27 22:01:18 2017
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sat, 27 May 2017 18:01:18 -0400
Subject: Any chance of a new release?
In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B85F586BEB0@HC-EXMBX04.herefordshire.gov.uk>
References: <7CA580B59C1ABD45B4614ED90D4C7B85F586BEB0@HC-EXMBX04.herefordshire.gov.uk>
Message-ID: <CABu_8zL2j3tT2K0m5fZxvykKeJo_o43rbOf-X4L5naAkt4FrGw@mail.gmail.com>

I'm working on systemd scripts for mailscanner.  I'm betting that Jerry is
waiting on me to complete and test that work first.  I'm getting closer,
just need to adapt or generalize the scripts for debian and SuSE
derivatives.

On Thu, May 18, 2017 at 8:03 AM, Randal, Phil <phil.randal at hoopleltd.co.uk>
wrote:

> Is there any chance of a new release incorporating all the changes up to
> date?
>
>
>
> Cheers,
>
>
>
> Phil
>
>
>
>
>
> *Phil Randal ? Infrastructure Engineer*
>
> *Hoople Ltd | Plough Lane Offices | Plough Lane | Hereford | HR4 0LE*
>
> *Tel*: *01432 260415*
>
> *Email*: phil.randal at hoopleltd.co.uk
>
> *Website*: www.hoopleltd.co.uk
>
>
> Hoople Ltd, Registered in England and Wales No. 7556595
> Registered office: Plough Lane, Hereford, HR4 0LE
>
> "Any opinion expressed in this e-mail or any attached files are those of
> the individual and not necessarily those of Hoople Ltd. You should be aware
> that Hoople Ltd. monitors its email service. This e-mail and any attached
> files are confidential and intended solely for the use of the addressee.
> This communication may contain material protected by law from being passed
> on. If you are not the intended recipient and have received this e-mail in
> error, you are advised that any use, dissemination, forwarding, printing or
> copying of this e-mail is strictly prohibited. If you have received this
> e-mail in error please contact the sender immediately and destroy all
> copies of it."
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170527/101f504d/attachment.html>

From kjell.m.randa at gmail.com  Mon May 29 20:40:59 2017
From: kjell.m.randa at gmail.com (Kjell Randa)
Date: Mon, 29 May 2017 22:40:59 +0200
Subject: MailScanner on Fedora 25
Message-ID: <CACgYBdqqw_WCxiXESy+5-tLxeX86+ihz35g1-c=3D8QsayRCGg@mail.gmail.com>

Hi,

I have been running MailScanner on Fedora for many years, but after
upgrading from Fedora 24 to 25 MailScanner will no longer start

/etc/init.d/mailscanner start
MailScanner starting ...
Can't load '/usr/local/lib64/perl5/auto/MIME/Base64/Base64.so' for module
MIME::Base64: libperl.so.5.22: cannot open shared object file: No such file
or directory at /usr/share/perl5/XSLoader.pm line 96.
at /usr/local/lib64/perl5/MIME/Base64.pm line 14.
Compilation failed in require at /usr/sbin/MailScanner line 72.
BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 76.
I am running MailScanner version 5.0.3-7
rpm -qa|grep -i mailscanner
MailScanner-perl-MIME-Base64-3.05-5.x86_64
MailScanner-5.0.3-7.noarch
mailscanner-mrtg-0.11.00-1.noarch

A re-install of MailScanner did not help.

Any help on this would be great.

Best regards
Kjell
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170529/ca633a03/attachment.html>

From thom at vdb.nl  Tue May 30 01:03:53 2017
From: thom at vdb.nl (Thom van der Boon)
Date: Tue, 30 May 2017 03:03:53 +0200 (CEST)
Subject: MailScanner on Fedora 25
In-Reply-To: <CACgYBdqqw_WCxiXESy+5-tLxeX86+ihz35g1-c=3D8QsayRCGg@mail.gmail.com>
References: <CACgYBdqqw_WCxiXESy+5-tLxeX86+ihz35g1-c=3D8QsayRCGg@mail.gmail.com>
Message-ID: <1749332409.203967.1496106233276.JavaMail.zimbra@vdb.nl>

Hi, 

The file XSloader.pm looks to be missing. This file looks to be moved to another archive in Ferdora 25 

Try to reinstall perl 

yum -y reinstall perl-libs 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Kjell Randa" <kjell.m.randa at gmail.com> 
Aan: mailscanner at lists.mailscanner.info 
Verzonden: Maandag 29 mei 2017 22:40:59 
Onderwerp: MailScanner on Fedora 25 

Hi, 
I have been running MailScanner on Fedora for many years, but after upgrading from Fedora 24 to 25 MailScanner will no longer start 

/etc/init.d/mailscanner start 
MailScanner starting ... 
Can't load '/usr/local/lib64/perl5/auto/MIME/Base64/Base64.so' for module MIME::Base64: libperl.so.5.22: cannot open shared object file: No such file or directory at /usr/share/perl5/XSLoader.pm line 96. 
at /usr/local/lib64/perl5/MIME/Base64.pm line 14. 
Compilation failed in require at /usr/sbin/MailScanner line 72. 
BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 76. 
I am running MailScanner version 5.0.3-7 
rpm -qa|grep -i mailscanner 
MailScanner -perl-MIME-Base64-3.05-5.x86_64 
MailScanner -5.0.3-7.noarch 
mailscanner -mrtg-0.11.00-1.noarch 

A re-install of MailScanner did not help. 

Any help on this would be great. 

Best regards 
Kjell 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170530/a2fa2761/attachment.html>

From eluis.linux at gmail.com  Wed May 31 08:10:23 2017
From: eluis.linux at gmail.com (=?UTF-8?Q?Eduardo_Lu=C3=ADs?=)
Date: Wed, 31 May 2017 09:10:23 +0100
Subject: Rejected DWF files
Message-ID: <CAJmq7sPZKr4HT6hhqjw-LGcALgjsLmN6S0JM3GYhAFXB_YZcTA@mail.gmail.com>

Hi,

First I want to thank you all the comunity behind Mailscanner contributing
for a saffer internet. Congratulations to all!!!!

I'm new on Mailscanner... but it's all installed and working like a charm.

I just can't figure it out how to do 2 things:

1st: DWF files (cad files) are allways getting blocked - it looks that it's
some kind of compressed file and says that has "virus" on it and the files
inside are like this: BA6AF0FA-81AA-43AD-B5D2-C16037DC0B0D.ef_   - final
result: file blocked and not delivered.

2nd: I allready saw on the internet how to NOT CHECK virus from inside to
outside. But I can't put it working. It allways checks all emails. Is there
a possibility to add whithelist networks? Like 192.168.1.0/24 and ignore
from this internal networks?

I'm using With Postfix, clamav and spamassassin

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170531/ce7e9ace/attachment.html>

From kjell.m.randa at gmail.com  Wed May 31 21:18:01 2017
From: kjell.m.randa at gmail.com (Kjell Randa)
Date: Wed, 31 May 2017 23:18:01 +0200
Subject: MailScanner on Fedora 25
In-Reply-To: <1749332409.203967.1496106233276.JavaMail.zimbra@vdb.nl>
References: <CACgYBdqqw_WCxiXESy+5-tLxeX86+ihz35g1-c=3D8QsayRCGg@mail.gmail.com>
 <1749332409.203967.1496106233276.JavaMail.zimbra@vdb.nl>
Message-ID: <CACgYBdr3tcdT9AJeCLzG5UH9Z3bxZAKa8JUL=tOAvwXELkas2A@mail.gmail.com>

Hi and thanks for the info

Turned out that the problem was
in /usr/local/lib64/perl5/auto/MIME/Base64/Base64.so beeing linked
with libperl.so.5.22 that was replaced with libperl.so.5.24 during the
upgrade.
Just removing all of /usr/local/lib64/perl5 and reinstalling MailScanner
solved the problem.

Best regards
Kjell Randa

On Tue, May 30, 2017 at 3:03 AM, Thom van der Boon <thom at vdb.nl> wrote:

> Hi,
>
> The file XSloader.pm looks to be missing. This file looks to be moved to
> another archive in Ferdora 25
>
> Try to reinstall perl
>
> yum -y reinstall perl-libs
>
> Met vriendelijke groet, Best regards,
>
>
> Thom van der Boon
> E-Mail: thom at vdb.nl
>
>
>
> =====
>
>
>
> Thom.H. van der Boon b.v.
> Transito 4
> 6909 DA  Babberich
> Tel.: +31 (0)88 4272727 <+31%2088%20427%202727>
> Fax: +31 (0)88 4272789 <+31%2088%20427%202789>
> Home Page: http://www.vdb.nl/
>
> ------------------------------
> *Van: *"Kjell Randa" <kjell.m.randa at gmail.com>
> *Aan: *mailscanner at lists.mailscanner.info
> *Verzonden: *Maandag 29 mei 2017 22:40:59
> *Onderwerp: *MailScanner on Fedora 25
>
> Hi,
> I have been running MailScanner on Fedora for many years, but after
> upgrading from Fedora 24 to 25 MailScanner will no longer start
>
> /etc/init.d/mailscanner start
> MailScanner starting ...
> Can't load '/usr/local/lib64/perl5/auto/MIME/Base64/Base64.so' for module
> MIME::Base64: libperl.so.5.22: cannot open shared object file: No such file
> or directory at /usr/share/perl5/XSLoader.pm line 96.
> at /usr/local/lib64/perl5/MIME/Base64.pm line 14.
> Compilation failed in require at /usr/sbin/MailScanner line 72.
> BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 76.
> I am running MailScanner version 5.0.3-7
> rpm -qa|grep -i mailscanner
> MailScanner-perl-MIME-Base64-3.05-5.x86_64
> MailScanner-5.0.3-7.noarch
> mailscanner-mrtg-0.11.00-1.noarch
>
> A re-install of MailScanner did not help.
>
> Any help on this would be great.
>
> Best regards
> Kjell
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170531/0307bf72/attachment.html>