From jerry.benton at mailborder.com  Tue Jan  2 18:01:23 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Tue, 2 Jan 2018 13:01:23 -0500
Subject: MailScanner v5.0.7-1 Released
Message-ID: <007901d383f3$b37817c0$1a684740$@mailborder.com>

Thanks to Shawn Iverson for putting out a new build.

Download:

https://www.mailscanner.info/downloads/

Changelog:

https://github.com/MailScanner/v5/blob/master/changelog


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605




From mark at msapiro.net  Wed Jan  3 00:13:35 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 2 Jan 2018 16:13:35 -0800
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <007901d383f3$b37817c0$1a684740$@mailborder.com>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
Message-ID: <43bd5de0-50b2-aeff-a0f9-68333a4cd73c@msapiro.net>

On 01/02/2018 10:01 AM, Jerry Benton wrote:
> Thanks to Shawn Iverson for putting out a new build.


Yes, thanks Shawn.

Installed here as an upgrade to 5.0.6-5 without issue.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From phil.randal at hoopleltd.co.uk  Wed Jan  3 09:42:04 2018
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Wed, 3 Jan 2018 09:42:04 +0000
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <007901d383f3$b37817c0$1a684740$@mailborder.com>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>

I've had a few funnies upgrading.

/etc/MailScanner.conf vanished, to be replaced by MailScanner.conf.rpmsave

/usr/lib/tmpfiles.d/clamd.conf contained

d /var/run/clamd.scan 0750 clam clam -

instead of

d /var/run/clamd.scan 0750 clam mtagroup -

Which was needed on my CentOS 7 install.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 02 January 2018 18:01
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: MailScanner v5.0.7-1 Released

Thanks to Shawn Iverson for putting out a new build.

Download:

https://www.mailscanner.info/downloads/

Changelog:

https://github.com/MailScanner/v5/blob/master/changelog


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605





--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."

From phil.randal at hoopleltd.co.uk  Wed Jan  3 10:05:36 2018
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Wed, 3 Jan 2018 10:05:36 +0000
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B85F7095386@HC-EXMBX04.herefordshire.gov.uk>

Sorry for the noise, tried again and all worked OK.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Randal, Phil
Sent: 03 January 2018 09:42
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner v5.0.7-1 Released

I've had a few funnies upgrading.

/etc/MailScanner.conf vanished, to be replaced by MailScanner.conf.rpmsave

/usr/lib/tmpfiles.d/clamd.conf contained

d /var/run/clamd.scan 0750 clam clam -

instead of

d /var/run/clamd.scan 0750 clam mtagroup -

Which was needed on my CentOS 7 install.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 02 January 2018 18:01
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: MailScanner v5.0.7-1 Released

Thanks to Shawn Iverson for putting out a new build.

Download:

https://www.mailscanner.info/downloads/

Changelog:

https://github.com/MailScanner/v5/blob/master/changelog


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605





--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From it at festa.bg  Wed Jan  3 10:31:01 2018
From: it at festa.bg (Valentin Laskov)
Date: Wed, 3 Jan 2018 12:31:01 +0200
Subject: MailScanner and SpamAssassin timeout
Message-ID: <566cb6e2-6fe4-572f-93ef-d2f84ec7b38b@festa.bg>

Hi and Happy New Year!

I see a great delay in the work of MailScanner and SpamAssassin. I 
increased SpamAssassin timeout in MailScanner.conf but I know this is 
not a solution. I still have

# cat /var/log/maillog | grep "SpamAssassin timed out" | wc -l
90

Please help me to debug my configuration!

This is the output of MailScanner --debug-sa
.....
10:39:11 Jan? 3 10:39:11.708 [11536] dbg: rules: compiled meta tests
10:39:11 Jan? 3 10:39:11.718 [11536] dbg: check: is spam? score=4.178 
required=5
10:39:11 Jan? 3 10:39:11.720 [11536] dbg: check: 
tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS
10:39:11 Jan? 3 10:39:11.721 [11536] dbg: check: 
subtests=__BODY_TEXT_LINE,__DKIM_DEPENDABLE,__EMPTY_BODY,__GATED_THROUGH_RCVD_REMOVER,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__KHOP_NO_FULL_NAME,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__NOT_SPOOFED,__SANE_MSGID,__SUBJ_SHORT,__TO_NO_ARROWS_R,__UNUSABLE_MSGID
10:39:11 Jan? 3 10:39:11.724 [11536] dbg: check: tagrun - tag DKIMDOMAIN 
is still blocking action 0
10:39:11 Jan? 3 10:39:11.733 [11536] dbg: plugin: 
Mail::SpamAssassin::Plugin::Bayes=HASH(0x418ddc0) implements 
'learner_close', priority 0
10:39:11 Jan? 3 10:39:11.736 [11536] dbg: bayes: untie-ing
=>10:39:11 Building a message batch to scan...
=>10:51:59 Have a batch of 1 message.
10:52:00 Stopping now as you are debugging me.

This is the output of MailScanner --lint . The timeout is just after 
"Connected to SpamAssassin cache database"

Trying to setlogsock(unix)
Skipping Custom Function file CustomAction.pm.orig as its name does not 
end in .pm or .pl

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Reading configuration file /etc/MailScanner/conf.d/custom.laskov.conf
Read 1501 hostnames from the phishing whitelist
Read 12755 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (5.0.3) is correct.

Your envelope_sender_header in spamassassin.conf is correct.

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
bayes: expire_old_tokens: 
__alarm__ignore__(26/::Plugin::Check::run_eval_tests/1105)
SpamAssassin reported no errors.
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = clamd"
mktemp: invalid option -- '-'
Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]
Found these virus scanners installed: clamd
===========================================================================
Can't use an undefined value as an ARRAY reference at 
/usr/share/MailScanner/perl/MailScanner/Sendmail.pm line 731.


Thank you!

Valentin Laskov



From iversons at rushville.k12.in.us  Wed Jan  3 11:17:10 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 3 Jan 2018 06:17:10 -0500
Subject: MailScanner and SpamAssassin timeout
In-Reply-To: <566cb6e2-6fe4-572f-93ef-d2f84ec7b38b@festa.bg>
References: <566cb6e2-6fe4-572f-93ef-d2f84ec7b38b@festa.bg>
Message-ID: <CABu_8z+NkX-1R15NDJpQrVg8Mukd4rRmsSPP6PNKJCLicS7cmQ@mail.gmail.com>

Going to take a guess, I think bayes may be the primary issue....

__alarm__ignore__(26/::Plugin::Check::run_eval_tests/1105)

You can also remove this file, unless it contains custom code you need move
into CustomAction.pm:

Skipping Custom Function file CustomAction.pm.orig as its name does not end
in .pm or .pl

And these, which could be related...seems that email metadata is lost in
the process of scanning the email...probably need to fix bayes first and
see what happens.

mktemp: invalid option -- '-'
Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]

Can't use an undefined value as an ARRAY reference at
/usr/share/MailScanner/perl/MailScanner/Sendmail.pm line 731.



On Wed, Jan 3, 2018 at 5:31 AM, Valentin Laskov <it at festa.bg> wrote:

> Hi and Happy New Year!
>
> I see a great delay in the work of MailScanner and SpamAssassin. I
> increased SpamAssassin timeout in MailScanner.conf but I know this is not a
> solution. I still have
>
> # cat /var/log/maillog | grep "SpamAssassin timed out" | wc -l
> 90
>
> Please help me to debug my configuration!
>
> This is the output of MailScanner --debug-sa
> .....
> 10:39:11 Jan  3 10:39:11.708 [11536] dbg: rules: compiled meta tests
> 10:39:11 Jan  3 10:39:11.718 [11536] dbg: check: is spam? score=4.178
> required=5
> 10:39:11 Jan  3 10:39:11.720 [11536] dbg: check:
> tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS
> 10:39:11 Jan  3 10:39:11.721 [11536] dbg: check:
> subtests=__BODY_TEXT_LINE,__DKIM_DEPENDABLE,__EMPTY_BODY,__
> GATED_THROUGH_RCVD_REMOVER,__HAS_FROM,__HAS_MESSAGE_ID,__HAS
> _MSGID,__KHOP_NO_FULL_NAME,__MISSING_REF,__MISSING_REPLY,__
> MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONE
> MPTY_BODY,__NOT_SPOOFED,__SANE_MSGID,__SUBJ_SHORT,__TO_NO_
> ARROWS_R,__UNUSABLE_MSGID
> 10:39:11 Jan  3 10:39:11.724 [11536] dbg: check: tagrun - tag DKIMDOMAIN
> is still blocking action 0
> 10:39:11 Jan  3 10:39:11.733 [11536] dbg: plugin:
> Mail::SpamAssassin::Plugin::Bayes=HASH(0x418ddc0) implements
> 'learner_close', priority 0
> 10:39:11 Jan  3 10:39:11.736 [11536] dbg: bayes: untie-ing
> =>10:39:11 Building a message batch to scan...
> =>10:51:59 Have a batch of 1 message.
> 10:52:00 Stopping now as you are debugging me.
>
> This is the output of MailScanner --lint . The timeout is just after
> "Connected to SpamAssassin cache database"
>
> Trying to setlogsock(unix)
> Skipping Custom Function file CustomAction.pm.orig as its name does not
> end in .pm or .pl
>
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/README
> Reading configuration file /etc/MailScanner/conf.d/custom.laskov.conf
> Read 1501 hostnames from the phishing whitelist
> Read 12755 hostnames from the phishing blacklists
>
> Checking version numbers...
> Version number in MailScanner.conf (5.0.3) is correct.
>
> Your envelope_sender_header in spamassassin.conf is correct.
>
> Checking for SpamAssassin errors (if you use it)...
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> bayes: expire_old_tokens: __alarm__ignore__(26/::Plugin:
> :Check::run_eval_tests/1105)
> SpamAssassin reported no errors.
> Connected to Processing Attempts Database
> Created Processing Attempts Database successfully
> There are 0 messages in the Processing Attempts Database
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = clamd"
> mktemp: invalid option -- '-'
> Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]
> Found these virus scanners installed: clamd
> ============================================================
> ===============
> Can't use an undefined value as an ARRAY reference at
> /usr/share/MailScanner/perl/MailScanner/Sendmail.pm line 731.
>
>
> Thank you!
>
> Valentin Laskov
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/c509a547/attachment.html>

From phil.randal at hoopleltd.co.uk  Wed Jan  3 11:52:27 2018
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Wed, 3 Jan 2018 11:52:27 +0000
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B85F7095515@HC-EXMBX04.herefordshire.gov.uk>

Looks like the fixes to clamav install result in the /usr/lib/tmpfiles.d/clamd.conf file, which did need editing in my setup as below.

Still get funnies with MailScanner.conf turning into MailScanner.conf.rpmsave if I do an install (as against upgrade) over an existing copy.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Randal, Phil
Sent: 03 January 2018 09:42
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner v5.0.7-1 Released

I've had a few funnies upgrading.

/etc/MailScanner.conf vanished, to be replaced by MailScanner.conf.rpmsave

/usr/lib/tmpfiles.d/clamd.conf contained

d /var/run/clamd.scan 0750 clam clam -

instead of

d /var/run/clamd.scan 0750 clam mtagroup -

Which was needed on my CentOS 7 install.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 02 January 2018 18:01
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: MailScanner v5.0.7-1 Released

Thanks to Shawn Iverson for putting out a new build.

Download:

https://www.mailscanner.info/downloads/

Changelog:

https://github.com/MailScanner/v5/blob/master/changelog


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605





--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From it at festa.bg  Wed Jan  3 12:56:13 2018
From: it at festa.bg (Valentin Laskov)
Date: Wed, 3 Jan 2018 14:56:13 +0200
Subject: MailScanner and SpamAssassin timeout
In-Reply-To: <CABu_8z+NkX-1R15NDJpQrVg8Mukd4rRmsSPP6PNKJCLicS7cmQ@mail.gmail.com>
References: <566cb6e2-6fe4-572f-93ef-d2f84ec7b38b@festa.bg>
 <CABu_8z+NkX-1R15NDJpQrVg8Mukd4rRmsSPP6PNKJCLicS7cmQ@mail.gmail.com>
Message-ID: <b87a8655-e273-d7c1-be18-a512a03763d5@festa.bg>

Thank you Shawn,

It seems you are right.

root at ns:/home/laskov# ls -la /root/.spamassassin
........
-rw-------? 1 root root?? 2580480 oct? 2 14:49 bayes_toks.expire9947
-rw-------? 1 root root?? 1306624 oct 29 14:58 bayes_toks.expire9954
-rw-------? 1 root root?? 2535424 dec 11 13:38 bayes_toks.expire9984
-rw-------? 1 root root?? 2465792 oct 25 10:52 bayes_toks.expire9990
-rw-------? 1 root root?? 2572288 sep 26 05:38 bayes_toks.expire9992
-rw-r--r--? 1 root root????? 1869 oct 19? 2016 user_prefs

root at ns:/home/laskov# ls -la /root/.spamassassin/bayes_toks.expire* | wc -l
4573

But I still have no idea how to resolve this.

?? 03.01.2018 ?. ? 13:17, Shawn Iverson ??????:
> Going to take a guess, I think bayes may be the primary issue....
>
> __alarm__ignore__(26/::Plugin::Check::run_eval_tests/1105)
>
> You can also remove this file, unless it contains custom code you need 
> move into CustomAction.pm:
>
> Skipping Custom Function file CustomAction.pm.orig as its name does 
> not end in .pm or .pl
>
> And these, which could be related...seems that email metadata is lost 
> in the process of scanning the email...probably need to fix bayes 
> first and see what happens.
>
> mktemp: invalid option -- '-'
> Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]
>
> Can't use an undefined value as an ARRAY reference at 
> /usr/share/MailScanner/perl/MailScanner/Sendmail.pm line 731.
>
>
>
> On Wed, Jan 3, 2018 at 5:31 AM, Valentin Laskov <it at festa.bg 
> <mailto:it at festa.bg>> wrote:
>
>     Hi and Happy New Year!
>
>     I see a great delay in the work of MailScanner and SpamAssassin. I
>     increased SpamAssassin timeout in MailScanner.conf but I know this
>     is not a solution. I still have
>
>     # cat /var/log/maillog | grep "SpamAssassin timed out" | wc -l
>     90
>
>     Please help me to debug my configuration!
>
>     This is the output of MailScanner --debug-sa
>     .....
>     10:39:11 Jan? 3 10:39:11.708 [11536] dbg: rules: compiled meta tests
>     10:39:11 Jan? 3 10:39:11.718 [11536] dbg: check: is spam?
>     score=4.178 required=5
>     10:39:11 Jan? 3 10:39:11.720 [11536] dbg: check:
>     tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS
>     10:39:11 Jan? 3 10:39:11.721 [11536] dbg: check:
>     subtests=__BODY_TEXT_LINE,__DKIM_DEPENDABLE,__EMPTY_BODY,__GATED_THROUGH_RCVD_REMOVER,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__KHOP_NO_FULL_NAME,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__NOT_SPOOFED,__SANE_MSGID,__SUBJ_SHORT,__TO_NO_ARROWS_R,__UNUSABLE_MSGID
>     10:39:11 Jan? 3 10:39:11.724 [11536] dbg: check: tagrun - tag
>     DKIMDOMAIN is still blocking action 0
>     10:39:11 Jan? 3 10:39:11.733 [11536] dbg: plugin:
>     Mail::SpamAssassin::Plugin::Bayes=HASH(0x418ddc0) implements
>     'learner_close', priority 0
>     10:39:11 Jan? 3 10:39:11.736 [11536] dbg: bayes: untie-ing
>     =>10:39:11 Building a message batch to scan...
>     =>10:51:59 Have a batch of 1 message.
>     10:52:00 Stopping now as you are debugging me.
>
>     This is the output of MailScanner --lint . The timeout is just
>     after "Connected to SpamAssassin cache database"
>
>     Trying to setlogsock(unix)
>     Skipping Custom Function file CustomAction.pm.orig as its name
>     does not end in .pm or .pl
>
>     Reading configuration file /etc/MailScanner/MailScanner.conf
>     Reading configuration file /etc/MailScanner/conf.d/README
>     Reading configuration file /etc/MailScanner/conf.d/custom.laskov.conf
>     Read 1501 hostnames from the phishing whitelist
>     Read 12755 hostnames from the phishing blacklists
>
>     Checking version numbers...
>     Version number in MailScanner.conf (5.0.3) is correct.
>
>     Your envelope_sender_header in spamassassin.conf is correct.
>
>     Checking for SpamAssassin errors (if you use it)...
>     Using SpamAssassin results cache
>     Connected to SpamAssassin cache database
>     bayes: expire_old_tokens:
>     __alarm__ignore__(26/::Plugin::Check::run_eval_tests/1105)
>     SpamAssassin reported no errors.
>     Connected to Processing Attempts Database
>     Created Processing Attempts Database successfully
>     There are 0 messages in the Processing Attempts Database
>     Using locktype = posix
>     MailScanner.conf says "Virus Scanners = clamd"
>     mktemp: invalid option -- '-'
>     Usage: mktemp [-V] | [-dqtu] [-p prefix] [template]
>     Found these virus scanners installed: clamd
>     ===========================================================================
>     Can't use an undefined value as an ARRAY reference at
>     /usr/share/MailScanner/perl/MailScanner/Sendmail.pm line 731.
>
>
>     Thank you!
>
>     Valentin Laskov
>
>
>
>
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>     <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>
>
>
>
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>
>
>
>
>

-- 
????????!

???????? ??????
?????????? ????
"????? ???????" ??
???. "??. ?????????" 48
9000 ??. ?????
???.:   +359 52 669137
GSM: +359 888 669137
Fax:   +359 52 669110

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/6fae4edd/attachment.html>

From iversons at rushville.k12.in.us  Wed Jan  3 14:38:43 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 3 Jan 2018 09:38:43 -0500
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B85F7095515@HC-EXMBX04.herefordshire.gov.uk>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095515@HC-EXMBX04.herefordshire.gov.uk>
Message-ID: <CABu_8zKjiZr90Bmj=YAk0Mex5astZ=sM_DnspdBr6BTn3611SQ@mail.gmail.com>

Phil,

Thanks for the feedback.  It does appear I need to set the group as
mtagroup in  /usr/lib/tmpfiles.d/clamd.conf.  Fortunately a very minor
edit, so expect that to be fixed shortly.

Can you share the following info?

1) Which version you were upgrading from?
2) How exactly you performed the install when it messed up?



On Wed, Jan 3, 2018 at 6:52 AM, Randal, Phil <phil.randal at hoopleltd.co.uk>
wrote:

> Looks like the fixes to clamav install result in the
> /usr/lib/tmpfiles.d/clamd.conf file, which did need editing in my setup as
> below.
>
> Still get funnies with MailScanner.conf turning into
> MailScanner.conf.rpmsave if I do an install (as against upgrade) over an
> existing copy.
>
> Cheers,
>
> Phil
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk@
> lists.mailscanner.info] On Behalf Of Randal, Phil
> Sent: 03 January 2018 09:42
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: RE: MailScanner v5.0.7-1 Released
>
> I've had a few funnies upgrading.
>
> /etc/MailScanner.conf vanished, to be replaced by MailScanner.conf.rpmsave
>
> /usr/lib/tmpfiles.d/clamd.conf contained
>
> d /var/run/clamd.scan 0750 clam clam -
>
> instead of
>
> d /var/run/clamd.scan 0750 clam mtagroup -
>
> Which was needed on my CentOS 7 install.
>
> Cheers,
>
> Phil
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk@
> lists.mailscanner.info] On Behalf Of Jerry Benton
> Sent: 02 January 2018 18:01
> To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
> Subject: MailScanner v5.0.7-1 Released
>
> Thanks to Shawn Iverson for putting out a new build.
>
> Download:
>
> https://www.mailscanner.info/downloads/
>
> Changelog:
>
> https://github.com/MailScanner/v5/blob/master/changelog
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1 (843) 800-8605
> +44 (020) 3883-8605
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Hoople Ltd, Registered in England and Wales No. 7556595 Registered office:
> Plough Lane, Hereford, HR4 0LE
>
> "Any opinion expressed in this e-mail or any attached files are those of
> the individual and not necessarily those of Hoople Ltd. You should be aware
> that Hoople Ltd. monitors its email service. This e-mail and any attached
> files are confidential and intended solely for the use of the addressee.
> This communication may contain material protected by law from being passed
> on. If you are not the intended recipient and have received this e-mail in
> error, you are advised that any use, dissemination, forwarding, printing or
> copying of this e-mail is strictly prohibited. If you have received this
> e-mail in error please contact the sender immediately and destroy all
> copies of it."
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/c7582f56/attachment.html>

From phil.randal at hoopleltd.co.uk  Wed Jan  3 14:47:39 2018
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Wed, 3 Jan 2018 14:47:39 +0000
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <CABu_8zKjiZr90Bmj=YAk0Mex5astZ=sM_DnspdBr6BTn3611SQ@mail.gmail.com>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095515@HC-EXMBX04.herefordshire.gov.uk>
 <CABu_8zKjiZr90Bmj=YAk0Mex5astZ=sM_DnspdBr6BTn3611SQ@mail.gmail.com>
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B85F7095866@HC-EXMBX04.herefordshire.gov.uk>

From 5.0.6-5.

Messed up by using the Mailwatch install script, which didn?t pass ?update to MailScanner?s setup.sh.

So it looks like an install (not update) over existing install results in no MailScanner.conf file.

If you do an update, the resultant MailScanner.conf is distributed MailScanner.conf file, not your original with any missing settings merged.  Though I may have cause this screw up myself, but not sure how.

Makes note to myself to clone my test VM before updating it next time.

Cheers,

Phil


From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: 03 January 2018 14:39
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner v5.0.7-1 Released

Phil,

Thanks for the feedback.  It does appear I need to set the group as mtagroup in  /usr/lib/tmpfiles.d/clamd.conf.  Fortunately a very minor edit, so expect that to be fixed shortly.

Can you share the following info?

1) Which version you were upgrading from?
2) How exactly you performed the install when it messed up?



On Wed, Jan 3, 2018 at 6:52 AM, Randal, Phil <phil.randal at hoopleltd.co.uk<mailto:phil.randal at hoopleltd.co.uk>> wrote:
Looks like the fixes to clamav install result in the /usr/lib/tmpfiles.d/clamd.conf file, which did need editing in my setup as below.

Still get funnies with MailScanner.conf turning into MailScanner.conf.rpmsave if I do an install (as against upgrade) over an existing copy.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal<mailto:mailscanner-bounces%2Bphil.randal>=hoopleltd.co.uk at lists.mailscanner.info<mailto:hoopleltd.co.uk at lists.mailscanner.info>] On Behalf Of Randal, Phil
Sent: 03 January 2018 09:42
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: MailScanner v5.0.7-1 Released

I've had a few funnies upgrading.

/etc/MailScanner.conf vanished, to be replaced by MailScanner.conf.rpmsave

/usr/lib/tmpfiles.d/clamd.conf contained

d /var/run/clamd.scan 0750 clam clam -

instead of

d /var/run/clamd.scan 0750 clam mtagroup -

Which was needed on my CentOS 7 install.

Cheers,

Phil

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+phil.randal<mailto:mailscanner-bounces%2Bphil.randal>=hoopleltd.co.uk at lists.mailscanner.info<mailto:hoopleltd.co.uk at lists.mailscanner.info>] On Behalf Of Jerry Benton
Sent: 02 January 2018 18:01
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: MailScanner v5.0.7-1 Released

Thanks to Shawn Iverson for putting out a new build.

Download:

https://www.mailscanner.info/downloads/

Changelog:

https://github.com/MailScanner/v5/blob/master/changelog


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 (843) 800-8605<tel:%2B1%20%20%20%28843%29%20800-8605>
+44 (020) 3883-8605<tel:%2B44%20%28020%29%203883-8605>





--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner



--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/509ad7da/attachment.html>

From iversons at rushville.k12.in.us  Wed Jan  3 14:53:11 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 3 Jan 2018 09:53:11 -0500
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B85F7095866@HC-EXMBX04.herefordshire.gov.uk>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095515@HC-EXMBX04.herefordshire.gov.uk>
 <CABu_8zKjiZr90Bmj=YAk0Mex5astZ=sM_DnspdBr6BTn3611SQ@mail.gmail.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095866@HC-EXMBX04.herefordshire.gov.uk>
Message-ID: <CABu_8z+DL=a0-L8xk5t+mqTgw9gy61h7FR8j_btTUKjMS9BWEg@mail.gmail.com>

I'll play with the MailWatch install script and see if I can track this
down going from 5.0.6-5.

Thanks for the info!

On Wed, Jan 3, 2018 at 9:47 AM, Randal, Phil <phil.randal at hoopleltd.co.uk>
wrote:

> From 5.0.6-5.
>
>
>
> Messed up by using the Mailwatch install script, which didn?t pass ?update
> to MailScanner?s setup.sh.
>
>
>
> So it looks like an install (not update) over existing install results in
> no MailScanner.conf file.
>
>
>
> If you do an update, the resultant MailScanner.conf is distributed
> MailScanner.conf file, not your original with any missing settings merged.
> Though I may have cause this screw up myself, but not sure how.
>
>
>
> Makes note to myself to clone my test VM before updating it next time.
>
>
>
> Cheers,
>
>
>
> Phil
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+phil.randal=
> hoopleltd.co.uk at lists.mailscanner.info] *On Behalf Of *Shawn Iverson
> *Sent:* 03 January 2018 14:39
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: MailScanner v5.0.7-1 Released
>
>
>
> Phil,
>
>
>
> Thanks for the feedback.  It does appear I need to set the group as
> mtagroup in  /usr/lib/tmpfiles.d/clamd.conf.  Fortunately a very minor
> edit, so expect that to be fixed shortly.
>
>
>
> Can you share the following info?
>
>
>
> 1) Which version you were upgrading from?
>
> 2) How exactly you performed the install when it messed up?
>
>
>
>
>
>
>
> On Wed, Jan 3, 2018 at 6:52 AM, Randal, Phil <phil.randal at hoopleltd.co.uk>
> wrote:
>
> Looks like the fixes to clamav install result in the
> /usr/lib/tmpfiles.d/clamd.conf file, which did need editing in my setup as
> below.
>
> Still get funnies with MailScanner.conf turning into
> MailScanner.conf.rpmsave if I do an install (as against upgrade) over an
> existing copy.
>
> Cheers,
>
> Phil
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk@
> lists.mailscanner.info] On Behalf Of Randal, Phil
> Sent: 03 January 2018 09:42
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: RE: MailScanner v5.0.7-1 Released
>
> I've had a few funnies upgrading.
>
> /etc/MailScanner.conf vanished, to be replaced by MailScanner.conf.rpmsave
>
> /usr/lib/tmpfiles.d/clamd.conf contained
>
> d /var/run/clamd.scan 0750 clam clam -
>
> instead of
>
> d /var/run/clamd.scan 0750 clam mtagroup -
>
> Which was needed on my CentOS 7 install.
>
> Cheers,
>
> Phil
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk@
> lists.mailscanner.info] On Behalf Of Jerry Benton
> Sent: 02 January 2018 18:01
> To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
> Subject: MailScanner v5.0.7-1 Released
>
> Thanks to Shawn Iverson for putting out a new build.
>
> Download:
>
> https://www.mailscanner.info/downloads/
>
> Changelog:
>
> https://github.com/MailScanner/v5/blob/master/changelog
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1 (843) 800-8605 <%2B1%20%20%20%28843%29%20800-8605>
> +44 (020) 3883-8605
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Hoople Ltd, Registered in England and Wales No. 7556595 Registered office:
> Plough Lane, Hereford, HR4 0LE
>
> "Any opinion expressed in this e-mail or any attached files are those of
> the individual and not necessarily those of Hoople Ltd. You should be aware
> that Hoople Ltd. monitors its email service. This e-mail and any attached
> files are confidential and intended solely for the use of the addressee.
> This communication may contain material protected by law from being passed
> on. If you are not the intended recipient and have received this e-mail in
> error, you are advised that any use, dissemination, forwarding, printing or
> copying of this e-mail is strictly prohibited. If you have received this
> e-mail in error please contact the sender immediately and destroy all
> copies of it."
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x1171 <(765)%20932-3901>
>
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/dd8ae2d8/attachment.html>

From it at festa.bg  Wed Jan  3 16:56:48 2018
From: it at festa.bg (Valentin Laskov)
Date: Wed, 3 Jan 2018 18:56:48 +0200
Subject: MailScanner and SpamAssassin timeout
In-Reply-To: <b87a8655-e273-d7c1-be18-a512a03763d5@festa.bg>
References: <566cb6e2-6fe4-572f-93ef-d2f84ec7b38b@festa.bg>
 <CABu_8z+NkX-1R15NDJpQrVg8Mukd4rRmsSPP6PNKJCLicS7cmQ@mail.gmail.com>
 <b87a8655-e273-d7c1-be18-a512a03763d5@festa.bg>
Message-ID: <c600e32f-1d61-2940-123b-5897a152bdf2@festa.bg>

Updating to 5.0.7 does not resolve the issue.


?? 03.01.2018 ?. ? 14:56, Valentin Laskov ??????:
>
>>     Version number in MailScanner.conf (5.0.3) is correct.
>>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/86cd0947/attachment.html>

From iversons at rushville.k12.in.us  Wed Jan  3 17:39:18 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 3 Jan 2018 12:39:18 -0500
Subject: MailScanner and SpamAssassin timeout
In-Reply-To: <c600e32f-1d61-2940-123b-5897a152bdf2@festa.bg>
References: <566cb6e2-6fe4-572f-93ef-d2f84ec7b38b@festa.bg>
 <CABu_8z+NkX-1R15NDJpQrVg8Mukd4rRmsSPP6PNKJCLicS7cmQ@mail.gmail.com>
 <b87a8655-e273-d7c1-be18-a512a03763d5@festa.bg>
 <c600e32f-1d61-2940-123b-5897a152bdf2@festa.bg>
Message-ID: <CABu_8zKZ+07e6_y=UC1J84m1=mnOWxEcyPvZ675-AxGdkKwaZA@mail.gmail.com>

I would suspect it doesn't, since it is outside of the MailScanner part
(SpamAssassin and/or Bayes)

I would suggest clearing bayes as a starting point (sa-learn --backup >
/path/to/some/backup && sa-learn -clear).

If the problem goes away, you may have had a corrupt bayes database.  If
not, you can restore it back with sa-learn --restore /path/to/some/backup

Another place to check is
/var/spool/MailScanner/incoming/SpamAssassin-Temp.  Sometimes this area can
fill up with old temp files.

On Wed, Jan 3, 2018 at 11:56 AM, Valentin Laskov <it at festa.bg> wrote:

> Updating to 5.0.7 does not resolve the issue.
>
> ?? 03.01.2018 ?. ? 14:56, Valentin Laskov ??????:
>
>
> Version number in MailScanner.conf (5.0.3) is correct.
>>
>>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171 <(765)%20932-3901>
iversons at rushville.k12.in.us



On Wed, Jan 3, 2018 at 11:56 AM, Valentin Laskov <it at festa.bg> wrote:

> Updating to 5.0.7 does not resolve the issue.
>
> ?? 03.01.2018 ?. ? 14:56, Valentin Laskov ??????:
>
>
> Version number in MailScanner.conf (5.0.3) is correct.
>>
>>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180103/43bab1a0/attachment.html>

From m.a.young at durham.ac.uk  Thu Jan  4 12:44:50 2018
From: m.a.young at durham.ac.uk (M A Young)
Date: Thu, 4 Jan 2018 12:44:50 +0000 (GMT)
Subject: issue in ms-update-phishing for v5.0.7-1
Message-ID: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>

When running /etc/cron.daily/mailscanner if curl is failing for some 
reason the output is

/usr/sbin/ms-update-phishing: line 141: CURLORWGET: command not found
/usr/sbin/ms-update-phishing: line 245: CURLORWGET: command not found

These lines both include
CURLORWGET = 'wget'
which means CURLORWGET is seen as a command. It should be
CURLORWGET='wget'
so CURLORWGET is seen as a variable.

	Michael Young

From jerry.benton at mailborder.com  Thu Jan  4 12:48:25 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 4 Jan 2018 07:48:25 -0500
Subject: issue in ms-update-phishing for v5.0.7-1
In-Reply-To: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
References: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
Message-ID: <01a701d3855a$50352f50$f09f8df0$@mailborder.com>

Read line 145. 

https://github.com/MailScanner/v5/blob/master/common/usr/sbin/ms-update-phis
hing

Then install wget. Better yet, install curl because you will get rejected
using wget. 


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of M A Young
Sent: Thursday, January 4, 2018 07:45
To: mailscanner at lists.mailscanner.info
Subject: issue in ms-update-phishing for v5.0.7-1

When running /etc/cron.daily/mailscanner if curl is failing for some reason
the output is

/usr/sbin/ms-update-phishing: line 141: CURLORWGET: command not found
/usr/sbin/ms-update-phishing: line 245: CURLORWGET: command not found

These lines both include
CURLORWGET = 'wget'
which means CURLORWGET is seen as a command. It should be CURLORWGET='wget'
so CURLORWGET is seen as a variable.

	Michael Young


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner



From jerry.benton at mailborder.com  Thu Jan  4 12:54:35 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 4 Jan 2018 07:54:35 -0500
Subject: issue in ms-update-phishing for v5.0.7-1
In-Reply-To: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
References: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
Message-ID: <01aa01d3855b$2c386d50$84a947f0$@mailborder.com>

Also, you seem to missing the logger command. That is what is triggering
your error. 


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of M A Young
Sent: Thursday, January 4, 2018 07:45
To: mailscanner at lists.mailscanner.info
Subject: issue in ms-update-phishing for v5.0.7-1

When running /etc/cron.daily/mailscanner if curl is failing for some reason
the output is

/usr/sbin/ms-update-phishing: line 141: CURLORWGET: command not found
/usr/sbin/ms-update-phishing: line 245: CURLORWGET: command not found

These lines both include
CURLORWGET = 'wget'
which means CURLORWGET is seen as a command. It should be CURLORWGET='wget'
so CURLORWGET is seen as a variable.

	Michael Young


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner



From iversons at rushville.k12.in.us  Thu Jan  4 15:09:49 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 4 Jan 2018 10:09:49 -0500
Subject: issue in ms-update-phishing for v5.0.7-1
In-Reply-To: <01a701d3855a$50352f50$f09f8df0$@mailborder.com>
References: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
 <01a701d3855a$50352f50$f09f8df0$@mailborder.com>
Message-ID: <CABu_8z+W98J9Mqn+3hGTnFkZyrb+64q1OJNJWAuvKoLBNC4Erg@mail.gmail.com>

Does look like lines 141 and 245 do have a space where they should not.
I'll add this to the next fixes.

On Thu, Jan 4, 2018 at 7:48 AM, Jerry Benton <jerry.benton at mailborder.com>
wrote:

> Read line 145.
>
> https://github.com/MailScanner/v5/blob/master/
> common/usr/sbin/ms-update-phis
> hing
>
> Then install wget. Better yet, install curl because you will get rejected
> using wget.
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1 (843) 800-8605
> +44 (020) 3883-8605
>
>
> -----Original Message-----
> From: MailScanner
> [mailto:mailscanner-bounces+jerry.benton=mailborder.com@
> lists.mailscanner.in
> fo] On Behalf Of M A Young
> Sent: Thursday, January 4, 2018 07:45
> To: mailscanner at lists.mailscanner.info
> Subject: issue in ms-update-phishing for v5.0.7-1
>
> When running /etc/cron.daily/mailscanner if curl is failing for some reason
> the output is
>
> /usr/sbin/ms-update-phishing: line 141: CURLORWGET: command not found
> /usr/sbin/ms-update-phishing: line 245: CURLORWGET: command not found
>
> These lines both include
> CURLORWGET = 'wget'
> which means CURLORWGET is seen as a command. It should be CURLORWGET='wget'
> so CURLORWGET is seen as a variable.
>
>         Michael Young
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180104/dea5d79d/attachment.html>

From jerry.benton at mailborder.com  Thu Jan  4 15:30:19 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 4 Jan 2018 10:30:19 -0500
Subject: issue in ms-update-phishing for v5.0.7-1
In-Reply-To: <CABu_8z+W98J9Mqn+3hGTnFkZyrb+64q1OJNJWAuvKoLBNC4Erg@mail.gmail.com>
References: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
 <01a701d3855a$50352f50$f09f8df0$@mailborder.com>
 <CABu_8z+W98J9Mqn+3hGTnFkZyrb+64q1OJNJWAuvKoLBNC4Erg@mail.gmail.com>
Message-ID: <01bf01d38570$edb4d940$c91e8bc0$@mailborder.com>

The error he has is coming from the logger command. The space around the equals sign depends on the environment, but it usually works with the space. You can remove it to be safe I guess. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Thursday, January 4, 2018 10:10
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: issue in ms-update-phishing for v5.0.7-1

 

Does look like lines 141 and 245 do have a space where they should not.  I'll add this to the next fixes.

 

On Thu, Jan 4, 2018 at 7:48 AM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

Read line 145.

https://github.com/MailScanner/v5/blob/master/common/usr/sbin/ms-update-phis
hing

Then install wget. Better yet, install curl because you will get rejected
using wget.


--
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605> 
+44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605> 


-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton <mailto:mailscanner-bounces%2Bjerry.benton> =mailborder.com at lists.mailscanner.in <mailto:mailborder.com at lists.mailscanner.in> 
fo] On Behalf Of M A Young
Sent: Thursday, January 4, 2018 07:45
To: mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
Subject: issue in ms-update-phishing for v5.0.7-1

When running /etc/cron.daily/mailscanner if curl is failing for some reason
the output is

/usr/sbin/ms-update-phishing: line 141: CURLORWGET: command not found
/usr/sbin/ms-update-phishing: line 245: CURLORWGET: command not found

These lines both include
CURLORWGET = 'wget'
which means CURLORWGET is seen as a command. It should be CURLORWGET='wget'
so CURLORWGET is seen as a variable.

        Michael Young


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner





 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180104/82d23fdb/attachment.html>

From mark at msapiro.net  Thu Jan  4 19:53:25 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Thu, 4 Jan 2018 11:53:25 -0800
Subject: issue in ms-update-phishing for v5.0.7-1
In-Reply-To: <01bf01d38570$edb4d940$c91e8bc0$@mailborder.com>
References: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
 <01a701d3855a$50352f50$f09f8df0$@mailborder.com>
 <CABu_8z+W98J9Mqn+3hGTnFkZyrb+64q1OJNJWAuvKoLBNC4Erg@mail.gmail.com>
 <01bf01d38570$edb4d940$c91e8bc0$@mailborder.com>
Message-ID: <befd92c1-7bb1-b256-8a63-b5f812b54c01@msapiro.net>

On 01/04/2018 07:30 AM, Jerry Benton wrote:
> The error he has is coming from the logger command. The space around the
> equals sign depends on the environment, but it usually works with the
> space. You can remove it to be safe I guess.


Not exactly.

line 141 is

>     logger -p $SYSLOG.warn -t update.bad.phishing.sites Updating using curl failed, trying wget. ; echo Updating using curl failed, trying wget. ; CURLORWGET = 'wget';

which because if the semicolons is equivalent to the 3 lines

> logger -p $SYSLOG.warn -t update.bad.phishing.sites Updating using curl failed, trying wget.
> echo Updating using curl failed, trying wget.
> CURLORWGET = 'wget'


The OP is correct that the last of these should be

> CURLORWGET='wget'

The same is true at line 245. Granted this only is a problem if there is
a non-zero status from the curl commands at lines 108 or 212 which will
only happen if there is a curl command in the path, but it fails for
some reason, but in any case, the spaces around the = at lines 141 and
245 should be removed.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From jerry.benton at mailborder.com  Thu Jan  4 20:01:20 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 4 Jan 2018 15:01:20 -0500
Subject: issue in ms-update-phishing for v5.0.7-1
In-Reply-To: <befd92c1-7bb1-b256-8a63-b5f812b54c01@msapiro.net>
References: <alpine.LFD.2.21.1801041233410.3614@algedi.dur.ac.uk>
 <01a701d3855a$50352f50$f09f8df0$@mailborder.com>
 <CABu_8z+W98J9Mqn+3hGTnFkZyrb+64q1OJNJWAuvKoLBNC4Erg@mail.gmail.com>
 <01bf01d38570$edb4d940$c91e8bc0$@mailborder.com>
 <befd92c1-7bb1-b256-8a63-b5f812b54c01@msapiro.net>
Message-ID: <01e701d38596$ca723fb0$5f56bf10$@mailborder.com>

The semicolon did not even register for me until you just pointed it out. I
program so much in C and PHP that it slipped right by me at first glance.
Thanks Mark. 



--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-----Original Message-----
From: MailScanner
[mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.in
fo] On Behalf Of Mark Sapiro
Sent: Thursday, January 4, 2018 14:53
To: mailscanner at lists.mailscanner.info
Subject: Re: issue in ms-update-phishing for v5.0.7-1

On 01/04/2018 07:30 AM, Jerry Benton wrote:
> The error he has is coming from the logger command. The space around 
> the equals sign depends on the environment, but it usually works with 
> the space. You can remove it to be safe I guess.


Not exactly.

line 141 is

>     logger -p $SYSLOG.warn -t update.bad.phishing.sites Updating using 
> curl failed, trying wget. ; echo Updating using curl failed, trying 
> wget. ; CURLORWGET = 'wget';

which because if the semicolons is equivalent to the 3 lines

> logger -p $SYSLOG.warn -t update.bad.phishing.sites Updating using curl
failed, trying wget.
> echo Updating using curl failed, trying wget.
> CURLORWGET = 'wget'


The OP is correct that the last of these should be

> CURLORWGET='wget'

The same is true at line 245. Granted this only is a problem if there is a
non-zero status from the curl commands at lines 108 or 212 which will only
happen if there is a curl command in the path, but it fails for some reason,
but in any case, the spaces around the = at lines 141 and
245 should be removed.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner



From gao at pztop.com  Thu Jan  4 20:42:00 2018
From: gao at pztop.com (Gao)
Date: Thu, 4 Jan 2018 12:42:00 -0800
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <CABu_8z+DL=a0-L8xk5t+mqTgw9gy61h7FR8j_btTUKjMS9BWEg@mail.gmail.com>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095356@HC-EXMBX04.herefordshire.gov.uk>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095515@HC-EXMBX04.herefordshire.gov.uk>
 <CABu_8zKjiZr90Bmj=YAk0Mex5astZ=sM_DnspdBr6BTn3611SQ@mail.gmail.com>
 <7CA580B59C1ABD45B4614ED90D4C7B85F7095866@HC-EXMBX04.herefordshire.gov.uk>
 <CABu_8z+DL=a0-L8xk5t+mqTgw9gy61h7FR8j_btTUKjMS9BWEg@mail.gmail.com>
Message-ID: <131d7a70-0255-cb1e-7dc5-2225b7c96468@pztop.com>

I updated from v5.0.6 and the upgrade went smoothly. After the upgrade I 
had trouble with MailWatch. It stop insert records to MariaDB. I 
restarted Mailscanner, MariaDB, Nginx and Clamd at scan and still it 
refused to insert new records in to maillog table. Although it appears 
in the maillog MailWatch did record the email.

The "fix" is simple: reboot the server and everything back to normal.? I 
still don't know what caused the issue. There should be a way to avoid 
this issue without reboot which interrupt the mail service for few minutes.

Gao


On 2018-01-03 06:53 AM, Shawn Iverson wrote:
> I'll play with the MailWatch install script and see if I can track 
> this down going from 5.0.6-5.
>
> Thanks for the info!
>
> On Wed, Jan 3, 2018 at 9:47 AM, Randal, Phil 
> <phil.randal at hoopleltd.co.uk <mailto:phil.randal at hoopleltd.co.uk>> wrote:
>
>     From 5.0.6-5.
>
>     Messed up by using the Mailwatch install script, which didn?t pass
>     ?update to MailScanner?s setup.sh.
>
>     So it looks like an install (not update) over existing install
>     results in no MailScanner.conf file.
>
>     If you do an update, the resultant MailScanner.conf is distributed
>     MailScanner.conf file, not your original with any missing settings
>     merged.? Though I may have cause this screw up myself, but not
>     sure how.
>
>     Makes note to myself to clone my test VM before updating it next time.
>
>     Cheers,
>
>     Phil
>
>     *From:*MailScanner [mailto:mailscanner-bounces+phil.randal
>     <mailto:mailscanner-bounces%2Bphil.randal>=hoopleltd.co.uk at lists.mailscanner.info
>     <mailto:hoopleltd.co.uk at lists.mailscanner.info>] *On Behalf Of
>     *Shawn Iverson
>     *Sent:* 03 January 2018 14:39
>     *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>     *Subject:* Re: MailScanner v5.0.7-1 Released
>
>     Phil,
>
>     Thanks for the feedback.? It does appear I need to set the group
>     as mtagroup in ?/usr/lib/tmpfiles.d/clamd.conf. Fortunately a very
>     minor edit, so expect that to be fixed shortly.
>
>     Can you share the following info?
>
>     1) Which version you were upgrading from?
>
>     2) How exactly you performed the install when it messed up?
>
>     On Wed, Jan 3, 2018 at 6:52 AM, Randal, Phil
>     <phil.randal at hoopleltd.co.uk <mailto:phil.randal at hoopleltd.co.uk>>
>     wrote:
>
>         Looks like the fixes to clamav install result in the
>         /usr/lib/tmpfiles.d/clamd.conf file, which did need editing in
>         my setup as below.
>
>         Still get funnies with MailScanner.conf turning into
>         MailScanner.conf.rpmsave if I do an install (as against
>         upgrade) over an existing copy.
>
>         Cheers,
>
>         Phil
>
>         -----Original Message-----
>         From: MailScanner [mailto:mailscanner-bounces+phil.randal
>         <mailto:mailscanner-bounces%2Bphil.randal>=hoopleltd.co.uk at lists.mailscanner.info
>         <mailto:hoopleltd.co.uk at lists.mailscanner.info>] On Behalf Of
>         Randal, Phil
>         Sent: 03 January 2018 09:42
>         To: MailScanner Discussion <mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>>
>         Subject: RE: MailScanner v5.0.7-1 Released
>
>         I've had a few funnies upgrading.
>
>         /etc/MailScanner.conf vanished, to be replaced by
>         MailScanner.conf.rpmsave
>
>         /usr/lib/tmpfiles.d/clamd.conf contained
>
>         d /var/run/clamd.scan 0750 clam clam -
>
>         instead of
>
>         d /var/run/clamd.scan 0750 clam mtagroup -
>
>         Which was needed on my CentOS 7 install.
>
>         Cheers,
>
>         Phil
>
>         -----Original Message-----
>         From: MailScanner [mailto:mailscanner-bounces+phil.randal
>         <mailto:mailscanner-bounces%2Bphil.randal>=hoopleltd.co.uk at lists.mailscanner.info
>         <mailto:hoopleltd.co.uk at lists.mailscanner.info>] On Behalf Of
>         Jerry Benton
>         Sent: 02 January 2018 18:01
>         To: 'MailScanner Discussion'
>         <mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>>
>         Subject: MailScanner v5.0.7-1 Released
>
>         Thanks to Shawn Iverson for putting out a new build.
>
>         Download:
>
>         https://www.mailscanner.info/downloads/
>         <https://www.mailscanner.info/downloads/>
>
>         Changelog:
>
>         https://github.com/MailScanner/v5/blob/master/changelog
>         <https://github.com/MailScanner/v5/blob/master/changelog>
>
>
>         --
>         Jerry Benton
>         www.mailborder.com <http://www.mailborder.com>
>         +1 (843) 800-8605 <tel:%2B1%20%20%20%28843%29%20800-8605>
>         +44 (020) 3883-8605 <tel:%2B44%20%28020%29%203883-8605>
>
>
>
>
>
>         --
>         MailScanner mailing list
>         mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>
>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>         <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>
>         Hoople Ltd, Registered in England and Wales No. 7556595
>         Registered office: Plough Lane, Hereford, HR4 0LE
>
>         "Any opinion expressed in this e-mail or any attached files
>         are those of the individual and not necessarily those of
>         Hoople Ltd. You should be aware that Hoople Ltd. monitors its
>         email service. This e-mail and any attached files are
>         confidential and intended solely for the use of the addressee.
>         This communication may contain material protected by law from
>         being passed on. If you are not the intended recipient and
>         have received this e-mail in error, you are advised that any
>         use, dissemination, forwarding, printing or copying of this
>         e-mail is strictly prohibited. If you have received this
>         e-mail in error please contact the sender immediately and
>         destroy all copies of it."
>
>
>         --
>         MailScanner mailing list
>         mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>
>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>         <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>
>
>
>         --
>         MailScanner mailing list
>         mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>
>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>         <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>
>
>
>     -- 
>
>     Shawn Iverson, CETL
>
>     Director of Technology
>
>     Rush County Schools
>
>     765-932-3901 x1171 <tel:%28765%29%20932-3901>
>
>     iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>
>
>
>
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>     <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>
>
>
>
>
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180104/d146e79f/attachment.html>

From mailinglists at feedmebits.nl  Sat Jan  6 13:03:29 2018
From: mailinglists at feedmebits.nl (Maarten)
Date: Sat, 6 Jan 2018 14:03:29 +0100
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <007901d383f3$b37817c0$1a684740$@mailborder.com>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
Message-ID: <8c9e2fff-245a-8264-0ab1-4cd6bd1f8c88@feedmebits.nl>

Thanks Shawn!? I updated and didn't run into any problems.

Maarten


On 01/02/2018 07:01 PM, Jerry Benton wrote:
> Thanks to Shawn Iverson for putting out a new build.
>
> Download:
>
> https://www.mailscanner.info/downloads/
>
> Changelog:
>
> https://github.com/MailScanner/v5/blob/master/changelog
>
>
> --
> Jerry Benton
> www.mailborder.com
> +1   (843) 800-8605
> +44 (020) 3883-8605
>
>
>
>
>


From mailinglists at feedmebits.nl  Sat Jan  6 13:18:00 2018
From: mailinglists at feedmebits.nl (Maarten)
Date: Sat, 6 Jan 2018 14:18:00 +0100
Subject: postfix and mailscanner
In-Reply-To: <bcc0672e-8b7f-a324-098a-304b2a17046e@msapiro.net>
References: <40ecb8f5-7bb6-1810-70a3-31df268ed267@feedmebits.nl>
 <01f401d37462$e0a122f0$a1e368d0$@mailborder.com>
 <CABu_8zLudr66TiXSRoy=+mddCn0br0pX4HCsP1g8PYq5HGiPuQ@mail.gmail.com>
 <bcc0672e-8b7f-a324-098a-304b2a17046e@msapiro.net>
Message-ID: <e8ca69f8-b032-29e6-9f42-13d46c693ba4@feedmebits.nl>

Would be interesting to hear your progress once you get further along on
this if the mailscanner devs ever

decide to implement? a mailscanner milter.


On 12/14/2017 01:21 AM, Mark Sapiro wrote:
> On 12/13/2017 03:49 PM, Shawn Iverson wrote:
>> For anyone curious, I am researching creating a mailscanner milter for
>> postfix.? I have gotten as far to conclude it is possible and that it
>> might bring additional functionality when using postfix and mailscanner
>> together.? For example, it would be possible to reject a message for
>> various reasons and still have detailed reports on the messages.
>
> I think this is great Shawn. The ability to reject mail at incoming SMTP
> time is the one single thing that I find lacking in MailScanner.
>


From pascal.maes at uclouvain.be  Sat Jan  6 14:41:34 2018
From: pascal.maes at uclouvain.be (Pascal Maes)
Date: Sat, 6 Jan 2018 14:41:34 +0000
Subject: MailScanner v5.0.7-1 Released
In-Reply-To: <8c9e2fff-245a-8264-0ab1-4cd6bd1f8c88@feedmebits.nl>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <8c9e2fff-245a-8264-0ab1-4cd6bd1f8c88@feedmebits.nl>
Message-ID: <13667A70-80EB-4BC5-B1BC-2D6EF005878A@uclouvain.be>


Same for me with the debian distribution and the command ./install.sh --update


Sometimes, a message is not scanned because of its size :

MailScanner[22834]: Message 1F86067DE8B.AFA28 from 210.134.90.12 (yamarika at pop21.odn.ne.jp) to uclouvain.be is too big for spam checks (1248971 > 800000 bytes)


In that case, it was clearly a spam with pictures attached and because of the pictures, the size was too big.

I wonder if it should be possible to analyze only  the text part of the message.



Thanks,


> Le 6 janv. 2018 ? 14:03, Maarten <mailinglists at feedmebits.nl> a ?crit :
> 
> Thanks Shawn!  I updated and didn't run into any problems.
> 
> Maarten
> 
> 
> On 01/02/2018 07:01 PM, Jerry Benton wrote:
>> Thanks to Shawn Iverson for putting out a new build.
>> 
>> Download:
>> 
>> https://www.mailscanner.info/downloads/
>> 
>> Changelog:
>> 
>> https://github.com/MailScanner/v5/blob/master/changelog
>> 
>> 
>> --
>> Jerry Benton
>> www.mailborder.com
>> +1   (843) 800-8605
>> +44 (020) 3883-8605
>> 
>> 
>> 
>> 
>> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-- 
Pascal


From yamakasi.014 at gmail.com  Sat Jan  6 13:55:29 2018
From: yamakasi.014 at gmail.com (Matt .)
Date: Sat, 6 Jan 2018 14:55:29 +0100
Subject: mtalog filling up with old message records
Message-ID: <CAPNQp06Tn6XDgTNX9gBXC6ftyR=zwpnQ_KSH8Ridm8r6+wZp5A@mail.gmail.com>

Hi Guys,

I have a strange issue from a MTA which had a DNS issue on the lookup
for it's a-record. Because of this a loop existed and all loop
messages got removed from the postfix spool.

What is happening at the moment is that the mtalog of Mailscanner is
filled up wit about 400K of records from time to time about this and I
cannot find where they come from. I can remove them but then after a
while they are added again:

30 Query     REPLACE INTO mtalog
(`timestamp`,`host`,`type`,`msg_id`,`relay`,`dsn`,`status`,`delay`)
VALUES (FROM_UNIXTIME('1515068227'),'backup-01','relay','3787FEEC01D','none','5.4.4','bounced
(Host or domain name not found. Name service error for
name=foo.bar.com type=A: Host not found)',SEC_TO_TIME('196'))

And this multiple times.

Why is this happening and can I fix it ?

Regards,

Matt

From maxsec at gmail.com  Sat Jan  6 17:15:43 2018
From: maxsec at gmail.com (Martin Hepworth)
Date: Sat, 06 Jan 2018 17:15:43 +0000
Subject: postfix and mailscanner
In-Reply-To: <e8ca69f8-b032-29e6-9f42-13d46c693ba4@feedmebits.nl>
References: <40ecb8f5-7bb6-1810-70a3-31df268ed267@feedmebits.nl>
 <01f401d37462$e0a122f0$a1e368d0$@mailborder.com>
 <CABu_8zLudr66TiXSRoy=+mddCn0br0pX4HCsP1g8PYq5HGiPuQ@mail.gmail.com>
 <bcc0672e-8b7f-a324-098a-304b2a17046e@msapiro.net>
 <e8ca69f8-b032-29e6-9f42-13d46c693ba4@feedmebits.nl>
Message-ID: <CAGDKor+AZQ-5yauVA80vkQ-nrmobYzc1WCdEOiycs0Qkh4oMUg@mail.gmail.com>

Won't happen I would suggest, as this breaks the whole architecture of
Mailscanner being the meat in an mta sandwich

On Sat, 6 Jan 2018 at 13:18, Maarten <mailinglists at feedmebits.nl> wrote:

> Would be interesting to hear your progress once you get further along on
> this if the mailscanner devs ever
>
> decide to implement  a mailscanner milter.
>
>
> On 12/14/2017 01:21 AM, Mark Sapiro wrote:
> > On 12/13/2017 03:49 PM, Shawn Iverson wrote:
> >> For anyone curious, I am researching creating a mailscanner milter for
> >> postfix.  I have gotten as far to conclude it is possible and that it
> >> might bring additional functionality when using postfix and mailscanner
> >> together.  For example, it would be possible to reject a message for
> >> various reasons and still have detailed reports on the messages.
> >
> > I think this is great Shawn. The ability to reject mail at incoming SMTP
> > time is the one single thing that I find lacking in MailScanner.
> >
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> --
-- 
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180106/d8a76f8b/attachment.html>

From mark at msapiro.net  Sat Jan  6 18:27:30 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Sat, 6 Jan 2018 10:27:30 -0800
Subject: SpamAssassin settings - was: Re: MailScanner v5.0.7-1 Released
In-Reply-To: <13667A70-80EB-4BC5-B1BC-2D6EF005878A@uclouvain.be>
References: <007901d383f3$b37817c0$1a684740$@mailborder.com>
 <8c9e2fff-245a-8264-0ab1-4cd6bd1f8c88@feedmebits.nl>
 <13667A70-80EB-4BC5-B1BC-2D6EF005878A@uclouvain.be>
Message-ID: <39f92e1c-d334-39b2-8497-f6f56fd8c0ae@msapiro.net>

On 01/06/2018 06:41 AM, Pascal Maes wrote:
> 
> Sometimes, a message is not scanned because of its size :
> 
> MailScanner[22834]: Message 1F86067DE8B.AFA28 from 210.134.90.12 (yamarika at pop21.odn.ne.jp) to uclouvain.be is too big for spam checks (1248971 > 800000 bytes)
> 
> 
> In that case, it was clearly a spam with pictures attached and because of the pictures, the size was too big.
> 
> I wonder if it should be possible to analyze only  the text part of the message.


It actually is scanned. Only SpamAssassin is skipped.

There are two settings that affect this. see
<https://www.mailscanner.info/MailScanner.conf.index.html#Max%20SpamAssassin%20Size>
and
<https://www.mailscanner.info/MailScanner.conf.index.html#Max%20Spam%20Check%20Size>.
The Max SpamAssassin Size setting can do more or less what you want, but
in order for it to be effective, Max Spam Check Size has to be bigger
than the message size.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From mark at msapiro.net  Sat Jan  6 18:45:37 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Sat, 6 Jan 2018 10:45:37 -0800
Subject: mtalog filling up with old message records
In-Reply-To: <CAPNQp06Tn6XDgTNX9gBXC6ftyR=zwpnQ_KSH8Ridm8r6+wZp5A@mail.gmail.com>
References: <CAPNQp06Tn6XDgTNX9gBXC6ftyR=zwpnQ_KSH8Ridm8r6+wZp5A@mail.gmail.com>
Message-ID: <27d2e1c5-2ffc-73fd-45c5-a082508480ba@msapiro.net>

On 01/06/2018 05:55 AM, Matt . wrote:
> Hi Guys,
> 
> I have a strange issue from a MTA which had a DNS issue on the lookup
> for it's a-record. Because of this a loop existed and all loop
> messages got removed from the postfix spool.
> 
> What is happening at the moment is that the mtalog of Mailscanner is
> filled up wit about 400K of records from time to time about this and I
> cannot find where they come from. I can remove them but then after a
> while they are added again:
> 
> 30 Query     REPLACE INTO mtalog
> (`timestamp`,`host`,`type`,`msg_id`,`relay`,`dsn`,`status`,`delay`)
> VALUES (FROM_UNIXTIME('1515068227'),'backup-01','relay','3787FEEC01D','none','5.4.4','bounced
> (Host or domain name not found. Name service error for
> name=foo.bar.com type=A: Host not found)',SEC_TO_TIME('196'))
> 
> And this multiple times.
> 
> Why is this happening and can I fix it ?


I think you answered your own question. There is some Postfix
misconfiguration that is creating some kind of retry loop when host
lookup fails. This is more of a Postfix question than a MailScanner
question. You need to examine your Postfix config and more than this one
log message to figure it out.

See <http://www.postfix.org/lists.html> for info on Postfix lists.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From thom at vdb.nl  Sun Jan  7 18:56:16 2018
From: thom at vdb.nl (Thom van der Boon)
Date: Sun, 7 Jan 2018 19:56:16 +0100 (CET)
Subject: postfix and mailscanner
In-Reply-To: <e8ca69f8-b032-29e6-9f42-13d46c693ba4@feedmebits.nl>
References: <40ecb8f5-7bb6-1810-70a3-31df268ed267@feedmebits.nl>
 <01f401d37462$e0a122f0$a1e368d0$@mailborder.com>
 <CABu_8zLudr66TiXSRoy=+mddCn0br0pX4HCsP1g8PYq5HGiPuQ@mail.gmail.com>
 <bcc0672e-8b7f-a324-098a-304b2a17046e@msapiro.net>
 <e8ca69f8-b032-29e6-9f42-13d46c693ba4@feedmebits.nl>
Message-ID: <2136937414.9447.1515351376840.JavaMail.zimbra@vdb.nl>

@Maarten: can you give me a pm at thom at vdb.nl for testing something specific to the Dutch language 


Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 


Van: "Maarten" <mailinglists at feedmebits.nl> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Zaterdag 6 januari 2018 14:18:00 
Onderwerp: Re: postfix and mailscanner 

Would be interesting to hear your progress once you get further along on 
this if the mailscanner devs ever 

decide to implement a mailscanner milter. 


On 12/14/2017 01:21 AM, Mark Sapiro wrote: 
> On 12/13/2017 03:49 PM, Shawn Iverson wrote: 
>> For anyone curious, I am researching creating a mailscanner milter for 
>> postfix. I have gotten as far to conclude it is possible and that it 
>> might bring additional functionality when using postfix and mailscanner 
>> together. For example, it would be possible to reject a message for 
>> various reasons and still have detailed reports on the messages. 
> 
> I think this is great Shawn. The ability to reject mail at incoming SMTP 
> time is the one single thing that I find lacking in MailScanner. 
> 



-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180107/843be209/attachment.html>

From yamakasi.014 at gmail.com  Mon Jan  8 00:59:19 2018
From: yamakasi.014 at gmail.com (Matt .)
Date: Mon, 8 Jan 2018 01:59:19 +0100
Subject: mtalog filling up with old message records
In-Reply-To: <27d2e1c5-2ffc-73fd-45c5-a082508480ba@msapiro.net>
References: <CAPNQp06Tn6XDgTNX9gBXC6ftyR=zwpnQ_KSH8Ridm8r6+wZp5A@mail.gmail.com>
 <27d2e1c5-2ffc-73fd-45c5-a082508480ba@msapiro.net>
Message-ID: <CAPNQp06vAOhtFtxdn3iOrP+RjvxALWAQpOBABiLvR+Y3fiD=Jw@mail.gmail.com>

Hi,

Yes you were right but I was not able to find where it went wrong. It
seems my maillig was not rotated on daily base but on weekly... that
fixed it!

Nice software!

Cheers,

Matt



2018-01-06 19:45 GMT+01:00 Mark Sapiro <mark at msapiro.net>:
> On 01/06/2018 05:55 AM, Matt . wrote:
>> Hi Guys,
>>
>> I have a strange issue from a MTA which had a DNS issue on the lookup
>> for it's a-record. Because of this a loop existed and all loop
>> messages got removed from the postfix spool.
>>
>> What is happening at the moment is that the mtalog of Mailscanner is
>> filled up wit about 400K of records from time to time about this and I
>> cannot find where they come from. I can remove them but then after a
>> while they are added again:
>>
>> 30 Query     REPLACE INTO mtalog
>> (`timestamp`,`host`,`type`,`msg_id`,`relay`,`dsn`,`status`,`delay`)
>> VALUES (FROM_UNIXTIME('1515068227'),'backup-01','relay','3787FEEC01D','none','5.4.4','bounced
>> (Host or domain name not found. Name service error for
>> name=foo.bar.com type=A: Host not found)',SEC_TO_TIME('196'))
>>
>> And this multiple times.
>>
>> Why is this happening and can I fix it ?
>
>
> I think you answered your own question. There is some Postfix
> misconfiguration that is creating some kind of retry loop when host
> lookup fails. This is more of a Postfix question than a MailScanner
> question. You need to examine your Postfix config and more than this one
> log message to figure it out.
>
> See <http://www.postfix.org/lists.html> for info on Postfix lists.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>

From J.Ede at birchenallhowden.co.uk  Thu Jan 18 11:29:37 2018
From: J.Ede at birchenallhowden.co.uk (Jason Ede)
Date: Thu, 18 Jan 2018 11:29:37 +0000
Subject: Perl Error
In-Reply-To: <678AA47A-0386-4AEE-8800-39DA9E7F0529@mailborder.com>
References: <FE1F316D-2E3B-4FF6-BEFD-3E578FF405B3@mailborder.com>
 <94B57AE7-63B1-4C91-B2C1-DE419BE77C5C@mailborder.com>
 <0BB551AD-2935-4CFD-8F1D-F9D39091952D@dwford.com>
 <C92BF681-63B8-489A-B058-09CAD16E1A7E@mailborder.com>
 <842F8BC3-A833-41A9-9A8D-7C481B2FDD3F@mailborder.com>
 <678AA47A-0386-4AEE-8800-39DA9E7F0529@mailborder.com>
Message-ID: <VI1PR06MB1376146F1A3E67F96DEBD648CFE80@VI1PR06MB1376.eurprd06.prod.outlook.com>

I know old thread, but was the cause to this ever tracked down?

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 30 November 2016 00:17
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Perl Error

Ok, now it is not doing file checks at all. Apparently that is why I added ?-U? a couple years ago.

Issue is still an issue ?


-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 - 844-436-6245


On Nov 29, 2016, at 6:51 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

I removed the -U from /usr/sbin/MailScanner and that seems to have cleared the issue.

Now I forgot why I added -U a couple of years ago ?

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245


On Nov 29, 2016, at 6:26 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Rick,

If it were only that easy.

Those files are the Perl modules. The problem is buried in the MailScanner code ? somewhere ?

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245


On Nov 29, 2016, at 6:19 PM, Rick Cooper <rcooper at dwford.com<mailto:rcooper at dwford.com>> wrote:

Look for the tainted item at those lines and untaint them?
On November 29, 2016 6:14:26 PM EST, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
More info:

Then Dangerous Content Scanning is on, these errors happen. If you turn it off, they go away. I think this may be related to a change in a Perl module somewhere. Maybe IO::File ?  Anyway, I am trying to track this down. So far I have only seen this on CentOS. If anyone can lend a hand, I would appreciate it.

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245


On Nov 29, 2016, at 5:58 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Anyone have any ideas?


Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.



-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245







--
Rick Cooper
Cell 260-414-8566
Fax 260-434-4400



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180118/59da7d33/attachment.html>

From jerry.benton at mailborder.com  Thu Jan 18 15:39:05 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 18 Jan 2018 10:39:05 -0500
Subject: Perl Error
In-Reply-To: <VI1PR06MB1376146F1A3E67F96DEBD648CFE80@VI1PR06MB1376.eurprd06.prod.outlook.com>
References: <FE1F316D-2E3B-4FF6-BEFD-3E578FF405B3@mailborder.com>
 <94B57AE7-63B1-4C91-B2C1-DE419BE77C5C@mailborder.com>
 <0BB551AD-2935-4CFD-8F1D-F9D39091952D@dwford.com>
 <C92BF681-63B8-489A-B058-09CAD16E1A7E@mailborder.com>
 <842F8BC3-A833-41A9-9A8D-7C481B2FDD3F@mailborder.com>
 <678AA47A-0386-4AEE-8800-39DA9E7F0529@mailborder.com>
 <VI1PR06MB1376146F1A3E67F96DEBD648CFE80@VI1PR06MB1376.eurprd06.prod.outlook.com>
Message-ID: <03c401d39072$799118a0$6cb349e0$@mailborder.com>

Yes, but I do not remember. The current release has the fixes. 

 

 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605



 

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jason Ede
Sent: Thursday, January 18, 2018 06:30
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: Perl Error

 

I know old thread, but was the cause to this ever tracked down?

 

Jason

 

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 30 November 2016 00:17
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Perl Error

 

Ok, now it is not doing file checks at all. Apparently that is why I added ?-U? a couple years ago. 

 

Issue is still an issue ? 

 


-
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1 - 844-436-6245

 

On Nov 29, 2016, at 6:51 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

 

I removed the -U from /usr/sbin/MailScanner and that seems to have cleared the issue. 

 

Now I forgot why I added -U a couple of years ago ? 


-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

 

On Nov 29, 2016, at 6:26 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

 

Rick,

 

If it were only that easy. 

 

Those files are the Perl modules. The problem is buried in the MailScanner code ? somewhere ? 


-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

 

On Nov 29, 2016, at 6:19 PM, Rick Cooper <rcooper at dwford.com <mailto:rcooper at dwford.com> > wrote:

 

Look for the tainted item at those lines and untaint them? 

On November 29, 2016 6:14:26 PM EST, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

More info:

 

Then Dangerous Content Scanning is on, these errors happen. If you turn it off, they go away. I think this may be related to a change in a Perl module somewhere. Maybe IO::File ?  Anyway, I am trying to track this down. So far I have only seen this on CentOS. If anyone can lend a hand, I would appreciate it. 


-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

 

On Nov 29, 2016, at 5:58 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

 

Anyone have any ideas?


Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.



-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245



 

 

 


-- 
Rick Cooper 
Cell 260-414-8566
Fax 260-434-4400

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180118/3dd439c7/attachment.html>

From J.Ede at birchenallhowden.co.uk  Thu Jan 18 15:55:45 2018
From: J.Ede at birchenallhowden.co.uk (Jason Ede)
Date: Thu, 18 Jan 2018 15:55:45 +0000
Subject: Perl Error
In-Reply-To: <03c401d39072$799118a0$6cb349e0$@mailborder.com>
References: <FE1F316D-2E3B-4FF6-BEFD-3E578FF405B3@mailborder.com>
 <94B57AE7-63B1-4C91-B2C1-DE419BE77C5C@mailborder.com>
 <0BB551AD-2935-4CFD-8F1D-F9D39091952D@dwford.com>
 <C92BF681-63B8-489A-B058-09CAD16E1A7E@mailborder.com>
 <842F8BC3-A833-41A9-9A8D-7C481B2FDD3F@mailborder.com>
 <678AA47A-0386-4AEE-8800-39DA9E7F0529@mailborder.com>
 <VI1PR06MB1376146F1A3E67F96DEBD648CFE80@VI1PR06MB1376.eurprd06.prod.outlook.com>
 <03c401d39072$799118a0$6cb349e0$@mailborder.com>
Message-ID: <VI1PR06MB137640533CBA035A6FDE4AB0CFE80@VI1PR06MB1376.eurprd06.prod.outlook.com>

Ok,
I think I can see from the changelog that it was fixed on the last build of version 4.86 and I?m still running 4.85.2. Is the old installed for version 4 still around or do I need to move up to 5?

I?ve also got the old community baruwa in this setup so don?t want to break that if possible. It won?t be affected by the path change to Version 5?
Cheers,

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 18 January 2018 15:39
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Perl Error

Yes, but I do not remember. The current release has the fixes.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jason Ede
Sent: Thursday, January 18, 2018 06:30
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: Perl Error

I know old thread, but was the cause to this ever tracked down?

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 30 November 2016 00:17
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: Perl Error

Ok, now it is not doing file checks at all. Apparently that is why I added ?-U? a couple years ago.

Issue is still an issue ?


-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 - 844-436-6245

On Nov 29, 2016, at 6:51 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

I removed the -U from /usr/sbin/MailScanner and that seems to have cleared the issue.

Now I forgot why I added -U a couple of years ago ?

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245

On Nov 29, 2016, at 6:26 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Rick,

If it were only that easy.

Those files are the Perl modules. The problem is buried in the MailScanner code ? somewhere ?

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245

On Nov 29, 2016, at 6:19 PM, Rick Cooper <rcooper at dwford.com<mailto:rcooper at dwford.com>> wrote:

Look for the tainted item at those lines and untaint them?
On November 29, 2016 6:14:26 PM EST, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
More info:

Then Dangerous Content Scanning is on, these errors happen. If you turn it off, they go away. I think this may be related to a change in a Perl module somewhere. Maybe IO::File ?  Anyway, I am trying to track this down. So far I have only seen this on CentOS. If anyone can lend a hand, I would appreciate it.

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245

On Nov 29, 2016, at 5:58 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Anyone have any ideas?


Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.



-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245





--
Rick Cooper
Cell 260-414-8566
Fax 260-434-4400



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180118/e6976c64/attachment.html>

From Eoin.Kim at rcst.com.au  Mon Jan 29 22:04:35 2018
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Mon, 29 Jan 2018 22:04:35 +0000
Subject: Checking URL on picture
Message-ID: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>

Hi all,

We had an email arrived and the message included a .png file yesterday. In our Outlook, it actually showed the picture as a part of message. The picture had a URL link which points to a dodgy .zip file. I've attached image files which explains what I'm talking about for your convenience.  Is there any way to check hyperlink on a picture and block the message? I guess this is similar to phishing check? Thanks a lot.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1 - The Annexe
133 Mary Street
Brisbane, QLD, 4000


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180129/2574c182/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image2.png
Type: image/png
Size: 15475 bytes
Desc: image2.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180129/2574c182/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image1.png
Type: image/png
Size: 80792 bytes
Desc: image1.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180129/2574c182/attachment-0003.png>

From mailscanner at replies.cyways.com  Mon Jan 29 22:34:31 2018
From: mailscanner at replies.cyways.com (Peter Lemieux)
Date: Mon, 29 Jan 2018 17:34:31 -0500
Subject: Checking URL on picture
In-Reply-To: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
Message-ID: <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>

On 01/29/2018 05:04 PM, Eoin Kim wrote:
> Is there any way to check hyperlink on a picture and block the message?
> I guess this is similar to phishing check? Thanks a lot.

You can do it in SpamAssassin with the "uri" keyword:

uri NO_GOOGLE     /google\.com/i
score NO_GOOGLE   10

With a score of ten, any message containing a URL that points to google.com 
would likely be marked as a "high-scoring" spam and handled per your rules.

Peter



From Eoin.Kim at rcst.com.au  Mon Jan 29 22:39:18 2018
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Mon, 29 Jan 2018 22:39:18 +0000
Subject: Checking URL on picture
In-Reply-To: <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
 <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
Message-ID: <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>

Hi Peter,

Thanks for your help. But couldn't it be done in the phishing check on MailScanner instead of putting a SA rule? Thanks again.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Peter Lemieux
Sent: Tuesday, 30 January 2018 8:35 AM
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Checking URL on picture

On 01/29/2018 05:04 PM, Eoin Kim wrote:
> Is there any way to check hyperlink on a picture and block the message?
> I guess this is similar to phishing check? Thanks a lot.

You can do it in SpamAssassin with the "uri" keyword:

uri NO_GOOGLE     /google\.com/i
score NO_GOOGLE   10

With a score of ten, any message containing a URL that points to google.com 
would likely be marked as a "high-scoring" spam and handled per your rules.

Peter




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From djones at ena.com  Mon Jan 29 22:51:54 2018
From: djones at ena.com (David Jones)
Date: Mon, 29 Jan 2018 16:51:54 -0600
Subject: Checking URL on picture
In-Reply-To: <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
 <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
 <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
Message-ID: <34eeacbd-5cfa-bb9d-b827-c6fc92bf250d@ena.com>

On 01/29/2018 04:39 PM, Eoin Kim wrote:
> Hi Peter,
> 
> Thanks for your help. But couldn't it be done in the phishing check on MailScanner instead of putting a SA rule? Thanks again.
> 
> Eoin
> 

I don't think you can't do a simple "uri" rule like that on content in 
an image.  Please post the entire message via pastbin.com so we can see 
the full headers and body.  You may/should redact the email address but 
don't change anything else.  I would like to run it through my 
MailScanner and see how it scores.


> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Peter Lemieux
> Sent: Tuesday, 30 January 2018 8:35 AM
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: Checking URL on picture
> 
> On 01/29/2018 05:04 PM, Eoin Kim wrote:
>> Is there any way to check hyperlink on a picture and block the message?
>> I guess this is similar to phishing check? Thanks a lot.
> 
> You can do it in SpamAssassin with the "uri" keyword:
> 
> uri NO_GOOGLE     /google\.com/i
> score NO_GOOGLE   10
> 
> With a score of ten, any message containing a URL that points to google.com
> would likely be marked as a "high-scoring" spam and handled per your rules.
> 
> Peter
> 
> 
> 
> 

-- 
David Jones

From Eoin.Kim at rcst.com.au  Mon Jan 29 23:07:52 2018
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Mon, 29 Jan 2018 23:07:52 +0000
Subject: Checking URL on picture
In-Reply-To: <34eeacbd-5cfa-bb9d-b827-c6fc92bf250d@ena.com>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
 <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
 <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
 <34eeacbd-5cfa-bb9d-b827-c6fc92bf250d@ena.com>
Message-ID: <fefc6fb145c145d1b33df0db9e53a75f@rcst.com.au>

Thanks David,

So just download the message file and edit the receiver email address? I'll try. Thanks.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of David Jones via MailScanner
Sent: Tuesday, 30 January 2018 8:52 AM
To: mailscanner at lists.mailscanner.info
Cc: David Jones <djones at ena.com>
Subject: Re: Checking URL on picture

On 01/29/2018 04:39 PM, Eoin Kim wrote:
> Hi Peter,
> 
> Thanks for your help. But couldn't it be done in the phishing check on MailScanner instead of putting a SA rule? Thanks again.
> 
> Eoin
> 

I don't think you can't do a simple "uri" rule like that on content in 
an image.  Please post the entire message via pastbin.com so we can see 
the full headers and body.  You may/should redact the email address but 
don't change anything else.  I would like to run it through my 
MailScanner and see how it scores.


> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Peter Lemieux
> Sent: Tuesday, 30 January 2018 8:35 AM
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: Checking URL on picture
> 
> On 01/29/2018 05:04 PM, Eoin Kim wrote:
>> Is there any way to check hyperlink on a picture and block the message?
>> I guess this is similar to phishing check? Thanks a lot.
> 
> You can do it in SpamAssassin with the "uri" keyword:
> 
> uri NO_GOOGLE     /google\.com/i
> score NO_GOOGLE   10
> 
> With a score of ten, any message containing a URL that points to google.com
> would likely be marked as a "high-scoring" spam and handled per your rules.
> 
> Peter
> 
> 
> 
> 

-- 
David Jones


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From mark at msapiro.net  Mon Jan 29 23:12:17 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 29 Jan 2018 15:12:17 -0800
Subject: Checking URL on picture
In-Reply-To: <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
 <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
 <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
Message-ID: <5089475f-044a-1e02-861b-2e6aa161be2a@msapiro.net>

On 01/29/2018 02:39 PM, Eoin Kim wrote:
> Hi Peter,
> 
> Thanks for your help. But couldn't it be done in the phishing check on MailScanner instead of putting a SA rule? Thanks again.


Yes. Just add the domain of the URL to phishing.bad.sites.custom

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From Eoin.Kim at rcst.com.au  Mon Jan 29 23:19:01 2018
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Mon, 29 Jan 2018 23:19:01 +0000
Subject: Checking URL on picture
In-Reply-To: <5089475f-044a-1e02-861b-2e6aa161be2a@msapiro.net>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
 <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
 <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
 <5089475f-044a-1e02-861b-2e6aa161be2a@msapiro.net>
Message-ID: <26609c83e51041fbb6dfde9849d11eb3@rcst.com.au>

Thanks Mark,

That sounds a good idea. Cheers.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Tuesday, 30 January 2018 9:12 AM
To: mailscanner at lists.mailscanner.info
Subject: Re: Checking URL on picture

On 01/29/2018 02:39 PM, Eoin Kim wrote:
> Hi Peter,
> 
> Thanks for your help. But couldn't it be done in the phishing check on MailScanner instead of putting a SA rule? Thanks again.


Yes. Just add the domain of the URL to phishing.bad.sites.custom

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner


From djones at ena.com  Tue Jan 30 12:15:25 2018
From: djones at ena.com (David Jones)
Date: Tue, 30 Jan 2018 12:15:25 +0000
Subject: Checking URL on picture
In-Reply-To: <fefc6fb145c145d1b33df0db9e53a75f@rcst.com.au>
References: <ed7ecb9cd8dd483fb6dde5cfbd12821f@rcst.com.au>
 <aec1a04b-e4ab-80d1-539f-e70cb245604a@replies.cyways.com>
 <25dbe0cfa6124beea58410f2aa77d665@rcst.com.au>
 <34eeacbd-5cfa-bb9d-b827-c6fc92bf250d@ena.com>,
 <fefc6fb145c145d1b33df0db9e53a75f@rcst.com.au>
Message-ID: <CY1PR02MB1288DCD194F5759FD667414FC6E40@CY1PR02MB1288.namprd02.prod.outlook.com>

If you have Thunderbird setup, then click the "More" button, then "View Source" then copy that text, redacted the local part of the recipient, then paste it into pastebin.com.

________________________________
From: Eoin Kim <Eoin.Kim at rcst.com.au>
Sent: Monday, January 29, 2018 5:07 PM
To: MailScanner Discussion
Cc: David Jones
Subject: RE: Checking URL on picture

Thanks David,

So just download the message file and edit the receiver email address? I'll try. Thanks.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of David Jones via MailScanner
Sent: Tuesday, 30 January 2018 8:52 AM
To: mailscanner at lists.mailscanner.info
Cc: David Jones <djones at ena.com>
Subject: Re: Checking URL on picture

On 01/29/2018 04:39 PM, Eoin Kim wrote:
> Hi Peter,
>
> Thanks for your help. But couldn't it be done in the phishing check on MailScanner instead of putting a SA rule? Thanks again.
>
> Eoin
>

I don't think you can't do a simple "uri" rule like that on content in
an image.  Please post the entire message via pastbin.com so we can see
the full headers and body.  You may/should redact the email address but
don't change anything else.  I would like to run it through my
MailScanner and see how it scores.


> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Peter Lemieux
> Sent: Tuesday, 30 January 2018 8:35 AM
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: Checking URL on picture
>
> On 01/29/2018 05:04 PM, Eoin Kim wrote:
>> Is there any way to check hyperlink on a picture and block the message?
>> I guess this is similar to phishing check? Thanks a lot.
>
> You can do it in SpamAssassin with the "uri" keyword:
>
> uri NO_GOOGLE     /google\.com/i
> score NO_GOOGLE   10
>
> With a score of ten, any message containing a URL that points to google.com
> would likely be marked as a "high-scoring" spam and handled per your rules.
>
> Peter
>
>
>
>

--
David Jones


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180130/b05ce5da/attachment.html>