From mailscanner-list at okla.com  Mon Oct  1 09:56:39 2018
From: mailscanner-list at okla.com (Tracy Greggs)
Date: Mon, 1 Oct 2018 04:56:39 -0500
Subject: bitdefender?
Message-ID: <05f701d4596d$11bc7de0$353579a0$@okla.com>

Anyone using bitdefender with MailScanner and if so, what are your thoughts
on it?

 

Thanks,

Tracy Greggs

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181001/b2231472/attachment.html>

From dobril at stanga.net  Wed Oct  3 08:53:53 2018
From: dobril at stanga.net (DobriL Dobrilov)
Date: Wed, 3 Oct 2018 11:53:53 +0300
Subject: Message attempted to kill MailScanner
Message-ID: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>

Hello,

 

I just received error notification from MailScanner.

 

Other Bad Content Detected ?

Report: MailScanner: Message attempted to kill MailScanner

?

 

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=? 

 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181003/12b5d905/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct  3 15:03:44 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 3 Oct 2018 11:03:44 -0400
Subject: Message attempted to kill MailScanner
In-Reply-To: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
Message-ID: <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>

Debugging...

Enable Debug=yes in MailScanner.conf

Empty all queues
Stop MailScanner daemons

Submit the suspect message to mta using appropriate mta tool

Run /usr/sbin/MailScanner, let it try to process the message, and capture
all output and the output in /var/log/maillog

You can process winmail.dat yourself using the tnef binary utility on your
server.

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net> wrote:

> Hello,
>
>
>
> I just received error notification from MailScanner.
>
>
>
> Other Bad Content Detected ?
>
> Report: MailScanner: Message attempted to kill MailScanner
>
> ?
>
>
>
> Then I try to review the mail from archive. Temporary bypass scanning and
> deliver to my box. The mail contain another attached email which contain
> attached email too which  finally contain JPG image.
>
> I try to forward to myself this time I get:
>
> The following e-mails were found to have: Other Bad Content Detected -
>
>
>
> The question is how I can debug those email and to find what exactly cause
> the issue.
>
> Possible reasons for me are:
>
> -       Bad character in the subject  because the Subject is
>
> ?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=
>
> =?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=
>
> =?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=?
>
>
>
> -       TNEF just cannot process attached email. From this perspective
> how I can extract winmail.dat from the message and to process it manually
> with TNEF.
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181003/eb79b6c2/attachment.html>

From dobril at stanga.net  Wed Oct  3 15:25:22 2018
From: dobril at stanga.net (DobriL Dobrilov)
Date: Wed, 3 Oct 2018 18:25:22 +0300
Subject: Message attempted to kill MailScanner
In-Reply-To: <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
Message-ID: <001b01d45b2d$4d465d60$e7d31820$@stanga.net>

The exact question is how I can get winmail.dat from the mail file. Postfix somehow generate it , but I did?t find the way.

 

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Wednesday, October 3, 2018 6:04 PM
To: mailscanner at lists.mailscanner.info
Cc: Shawn Iverson <iversons at rushville.k12.in.us>
Subject: Re: Message attempted to kill MailScanner

 

Debugging...

 

Enable Debug=yes in MailScanner.conf

 

Empty all queues

Stop MailScanner daemons

 

Submit the suspect message to mta using appropriate mta tool

 

Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog

 

You can process winmail.dat yourself using the tnef binary utility on your server.

 

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

 

I just received error notification from MailScanner.

 

Other Bad Content Detected ?

Report: MailScanner: Message attempted to kill MailScanner

?

 

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=? 

 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181003/75d3ead2/attachment.html>

From mark at msapiro.net  Wed Oct  3 16:43:22 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Wed, 3 Oct 2018 09:43:22 -0700
Subject: Message attempted to kill MailScanner
In-Reply-To: <001b01d45b2d$4d465d60$e7d31820$@stanga.net>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
 <001b01d45b2d$4d465d60$e7d31820$@stanga.net>
Message-ID: <c68b3547-5fd2-0918-09b1-24db6bbf0615@msapiro.net>

On 10/03/2018 08:25 AM, DobriL Dobrilov wrote:
> The exact question is how I can get winmail.dat from the mail file.
> Postfix somehow generate it , but I did?t find the way.


Examine the raw message, find the MIME part that is the winmail.dat file
and decode the content per its Content-Transfer-Encoding.

Also note that this part is generated by the Microsoft mail client that
generated the mail, not by Postfix.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From dobril at stanga.net  Thu Oct  4 12:11:20 2018
From: dobril at stanga.net (DobriL Dobrilov)
Date: Thu, 4 Oct 2018 15:11:20 +0300
Subject: Message attempted to kill MailScanner
In-Reply-To: <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
Message-ID: <006e01d45bdb$5c4072c0$14c15840$@stanga.net>

Hello,

 

This is the error message which MailScanner show in debug mode, after that immediately quit.

 

 

Wide character in subroutine entry at /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616




From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Wednesday, October 3, 2018 6:04 PM
To: mailscanner at lists.mailscanner.info
Cc: Shawn Iverson <iversons at rushville.k12.in.us>
Subject: Re: Message attempted to kill MailScanner

 

Debugging...

 

Enable Debug=yes in MailScanner.conf

 

Empty all queues

Stop MailScanner daemons

 

Submit the suspect message to mta using appropriate mta tool

 

Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog

 

You can process winmail.dat yourself using the tnef binary utility on your server.

 

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

 

I just received error notification from MailScanner.

 

Other Bad Content Detected ?

Report: MailScanner: Message attempted to kill MailScanner

?

 

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=? 

 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181004/d929caa6/attachment.html>

From mark at msapiro.net  Fri Oct  5 22:57:41 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 5 Oct 2018 15:57:41 -0700
Subject: Problem setting up MailScanner 5.1.1 milter support.
Message-ID: <df4b4d9e-721b-9f0b-a0bb-25ac3789f840@msapiro.net>

I am experimenting with the new MailScanner milter option.

I have done the following things.

Removed
---------------------------------
/Received: / HOLD
---------------------------------
from /etc/postfix/header_checks

Added
---------------------------------
# MailScanner milter
smtpd_milters = inet:127.0.0.1:33333
---------------------------------
to /etc/postfix/main.cf

Added
---------------------------------
Incoming Queue Dir = /var/spool/MailScanner/milterin
Outgoing Queue Dir = /var/spool/MailScanner/milterout
MTA = msmail
MSMail Queue Type = short
Milter Scanner = yes
Milter Max Children = 1
---------------------------------
in a conf.d file in my MailScanner config overriding any defaults in
MailScanner.conf added by the installation of 5.1.1

Created those directories owned by Run As User and (re)started all the
services. The milter is listening on port 33333 and everything looks
good, but MailScanner doesn't scan the mail and nothing gets written
into the milterin and milterout directories.

Here's a mail.log entry

> Oct  5 14:43:12 msapiro postfix/smtpd[11012]: connect from localhost[127.0.0.1]
> Oct  5 14:44:30 msapiro postfix/smtpd[11012]: 69BEC340120: client=localhost[127.0.0.1]
> Oct  5 14:45:11 msapiro postfix/cleanup[11438]: 69BEC340120: message-id=<20181005212532.GC2579 at msapiro.net>
> Oct  5 14:45:11 msapiro postfix/qmgr[30689]: 69BEC340120: from=<mark at msapiro.net>, size=665, nrcpt=1 (queue active)
> Oct  5 14:45:11 msapiro postfix/local[11657]: 69BEC340120: to=<mark at msapiro.net>, relay=local, delay=58, delays=58/0.01/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox)
> Oct  5 14:45:11 msapiro postfix/qmgr[30689]: 69BEC340120: removed
> Oct  5 14:45:18 msapiro postfix/smtpd[11012]: disconnect from localhost[127.0.0.1] helo=1 mail=1/2 rcpt=1 data=1 quit=1 commands=5/6

And here are the headers from the delivered mail

> From mark at msapiro.net  Fri Oct  5 14:45:11 2018
> Return-Path: <mark at msapiro.net>
> X-Original-To: mark at msapiro.net
> Delivered-To: mark at msapiro.net
> Received: from msapiro.net (localhost [127.0.0.1])
>         by msapiro.net (Postfix) with SMTP id 69BEC340120
>         for <mark at msapiro.net>; Fri,  5 Oct 2018 14:44:12 -0700 (PDT)
> Date: Fri, 5 Oct 2018 14:25:32 -0700
> From: Mark Sapiro <mark at msapiro.net>
> To: Mark Sapiro <mark at msapiro.net>
> Subject: Yet another
> Message-ID: <20181005212532.GC2579 at msapiro.net>
> MIME-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> Content-Disposition: inline
> User-Agent: Mutt/1.5.24 (2015-08-30)

I've tried setting debug = yes and running manuallyMailScanner as root.
It hangs at "Building a message batch to scan..." even if I send a
message through Postfix.

This is the full mail.log starting with restarting msmilter

> Oct  5 15:41:58 msapiro root[29411]: Stopping MSMilter
> Oct  5 15:41:58 msapiro root[29418]: MSMilter stopped
> Oct  5 15:41:58 msapiro root[29423]: Starting MSMilter
> Oct  5 15:41:59 msapiro MSMilter[29431]: MSMilter Daemon starting...
> Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file /etc/MailScanner/MailScanner.conf
> Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file /etc/MailScanner/conf.d/00local
> Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file /etc/MailScanner/conf.d/10milter
> Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file /etc/MailScanner/conf.d/99testing
> Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file /etc/MailScanner/conf.d/README
> Oct  5 15:41:59 msapiro MSMilter[29431]: Read 1501 hostnames from the phishing whitelist
> Oct  5 15:41:59 msapiro MSMilter[29431]: Read 16624 hostnames from the phishing blacklists
> Oct  5 15:41:59 msapiro MSMilter[29433]: initialization:
> Oct  5 15:41:59 msapiro MSMilter[29433]:  PidFile = /var/run/MSMilter.pid
> Oct  5 15:41:59 msapiro MSMilter[29433]:  user = postfix
> Oct  5 15:41:59 msapiro MSMilter[29433]:  group = clamav
> Oct  5 15:41:59 msapiro MSMilter[29433]:  bind = 127.0.0.1
> Oct  5 15:41:59 msapiro MSMilter[29433]:  port = 33333
> Oct  5 15:41:59 msapiro root[29434]: MSMilter started
> Oct  5 15:42:15 msapiro root[29564]: Stopping MailScanner
> Oct  5 15:42:15 msapiro MailScanner[4279]: MailScanner child caught a SIGHUP
> Oct  5 15:42:15 msapiro root[29570]: Found a possible dead PID. Stopping all MailScanner rogue processes ...
> Oct  5 15:42:15 msapiro root[29581]: MailScanner stopped
> Oct  5 15:42:43 msapiro MailScanner[29717]: MailScanner Email Processor version 5.1.1 starting...
> Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file /etc/MailScanner/MailScanner.conf
> Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file /etc/MailScanner/conf.d/00local
> Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file /etc/MailScanner/conf.d/10milter
> Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file /etc/MailScanner/conf.d/99testing
> Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file /etc/MailScanner/conf.d/README
> Oct  5 15:42:43 msapiro MailScanner[29717]: Read 1501 hostnames from the phishing whitelist
> Oct  5 15:42:43 msapiro MailScanner[29717]: Read 16624 hostnames from the phishing blacklists
> Oct  5 15:42:43 msapiro MailScanner[29717]: Using SpamAssassin results cache
> Oct  5 15:42:43 msapiro MailScanner[29717]: Connected to SpamAssassin cache database
> Oct  5 15:42:43 msapiro MailScanner[29717]: Enabling SpamAssassin auto-whitelist functionality...
> Oct  5 15:42:45 msapiro MailScanner[29717]: Connected to Processing Attempts Database
> Oct  5 15:42:45 msapiro MailScanner[29717]: Found 0 messages in the Processing Attempts Database
> Oct  5 15:42:45 msapiro MailScanner[29717]: lock.pl sees Config  LockType =  flock
> Oct  5 15:42:45 msapiro MailScanner[29717]: lock.pl sees have_module =  0
> Oct  5 15:42:45 msapiro MailScanner[29717]: Using locktype = flock
> Oct  5 15:44:15 msapiro postfix/smtpd[30228]: connect from localhost[127.0.0.1]
> Oct  5 15:44:15 msapiro MSMilter[29436]: Localhost relay detected
> Oct  5 15:44:57 msapiro postfix/smtpd[30228]: 2444D340120: client=localhost[127.0.0.1]
> Oct  5 15:45:14 msapiro postfix/cleanup[30434]: 2444D340120: message-id=<20181005224457.2444D340120 at msapiro.net>
> Oct  5 15:45:14 msapiro postfix/qmgr[30689]: 2444D340120: from=<mark at msapiro.net>, size=580, nrcpt=1 (queue active)
> Oct  5 15:45:14 msapiro postfix/local[30540]: 2444D340120: to=<mark at msapiro.net>, relay=local, delay=28, delays=28/0/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox)
> Oct  5 15:45:14 msapiro postfix/qmgr[30689]: 2444D340120: removed
> Oct  5 15:45:21 msapiro postfix/smtpd[30228]: disconnect from localhost[127.0.0.1] helo=1 mail=1 rcpt=1 data=1 quit=1 commands=5


There is probably something obvious that I'm missing, but I don't know what.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From iversons at rushville.k12.in.us  Sat Oct  6 01:04:25 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 5 Oct 2018 21:04:25 -0400
Subject: Problem setting up MailScanner 5.1.1 milter support.
In-Reply-To: <df4b4d9e-721b-9f0b-a0bb-25ac3789f840@msapiro.net>
References: <df4b4d9e-721b-9f0b-a0bb-25ac3789f840@msapiro.net>
Message-ID: <CABu_8zJjm5bv15J+R4WOoMN8dm5mUXER7rGPNNNUM4Ze7ifgSA@mail.gmail.com>

Did you send a test email from localhost? Localhost is an exception in
milter processing to allow delivery after scanning without creating an
endless loop.

Try sending one from a remote host.

On Fri, Oct 5, 2018, 6:57 PM Mark Sapiro <mark at msapiro.net> wrote:

> I am experimenting with the new MailScanner milter option.
>
> I have done the following things.
>
> Removed
> ---------------------------------
> /Received: / HOLD
> ---------------------------------
> from /etc/postfix/header_checks
>
> Added
> ---------------------------------
> # MailScanner milter
> smtpd_milters = inet:127.0.0.1:33333
> ---------------------------------
> to /etc/postfix/main.cf
>
> Added
> ---------------------------------
> Incoming Queue Dir = /var/spool/MailScanner/milterin
> Outgoing Queue Dir = /var/spool/MailScanner/milterout
> MTA = msmail
> MSMail Queue Type = short
> Milter Scanner = yes
> Milter Max Children = 1
> ---------------------------------
> in a conf.d file in my MailScanner config overriding any defaults in
> MailScanner.conf added by the installation of 5.1.1
>
> Created those directories owned by Run As User and (re)started all the
> services. The milter is listening on port 33333 and everything looks
> good, but MailScanner doesn't scan the mail and nothing gets written
> into the milterin and milterout directories.
>
> Here's a mail.log entry
>
> > Oct  5 14:43:12 msapiro postfix/smtpd[11012]: connect from
> localhost[127.0.0.1]
> > Oct  5 14:44:30 msapiro postfix/smtpd[11012]: 69BEC340120:
> client=localhost[127.0.0.1]
> > Oct  5 14:45:11 msapiro postfix/cleanup[11438]: 69BEC340120: message-id=<
> 20181005212532.GC2579 at msapiro.net>
> > Oct  5 14:45:11 msapiro postfix/qmgr[30689]: 69BEC340120: from=<
> mark at msapiro.net>, size=665, nrcpt=1 (queue active)
> > Oct  5 14:45:11 msapiro postfix/local[11657]: 69BEC340120: to=<
> mark at msapiro.net>, relay=local, delay=58, delays=58/0.01/0/0.03,
> dsn=2.0.0, status=sent (delivered to mailbox)
> > Oct  5 14:45:11 msapiro postfix/qmgr[30689]: 69BEC340120: removed
> > Oct  5 14:45:18 msapiro postfix/smtpd[11012]: disconnect from
> localhost[127.0.0.1] helo=1 mail=1/2 rcpt=1 data=1 quit=1 commands=5/6
>
> And here are the headers from the delivered mail
>
> > From mark at msapiro.net  Fri Oct  5 14:45:11 2018
> > Return-Path: <mark at msapiro.net>
> > X-Original-To: mark at msapiro.net
> > Delivered-To: mark at msapiro.net
> > Received: from msapiro.net (localhost [127.0.0.1])
> >         by msapiro.net (Postfix) with SMTP id 69BEC340120
> >         for <mark at msapiro.net>; Fri,  5 Oct 2018 14:44:12 -0700 (PDT)
> > Date: Fri, 5 Oct 2018 14:25:32 -0700
> > From: Mark Sapiro <mark at msapiro.net>
> > To: Mark Sapiro <mark at msapiro.net>
> > Subject: Yet another
> > Message-ID: <20181005212532.GC2579 at msapiro.net>
> > MIME-Version: 1.0
> > Content-Type: text/plain; charset=us-ascii
> > Content-Disposition: inline
> > User-Agent: Mutt/1.5.24 (2015-08-30)
>
> I've tried setting debug = yes and running manuallyMailScanner as root.
> It hangs at "Building a message batch to scan..." even if I send a
> message through Postfix.
>
> This is the full mail.log starting with restarting msmilter
>
> > Oct  5 15:41:58 msapiro root[29411]: Stopping MSMilter
> > Oct  5 15:41:58 msapiro root[29418]: MSMilter stopped
> > Oct  5 15:41:58 msapiro root[29423]: Starting MSMilter
> > Oct  5 15:41:59 msapiro MSMilter[29431]: MSMilter Daemon starting...
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file
> /etc/MailScanner/conf.d/00local
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file
> /etc/MailScanner/conf.d/10milter
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file
> /etc/MailScanner/conf.d/99testing
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Reading configuration file
> /etc/MailScanner/conf.d/README
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Read 1501 hostnames from the
> phishing whitelist
> > Oct  5 15:41:59 msapiro MSMilter[29431]: Read 16624 hostnames from the
> phishing blacklists
> > Oct  5 15:41:59 msapiro MSMilter[29433]: initialization:
> > Oct  5 15:41:59 msapiro MSMilter[29433]:  PidFile = /var/run/MSMilter.pid
> > Oct  5 15:41:59 msapiro MSMilter[29433]:  user = postfix
> > Oct  5 15:41:59 msapiro MSMilter[29433]:  group = clamav
> > Oct  5 15:41:59 msapiro MSMilter[29433]:  bind = 127.0.0.1
> > Oct  5 15:41:59 msapiro MSMilter[29433]:  port = 33333
> > Oct  5 15:41:59 msapiro root[29434]: MSMilter started
> > Oct  5 15:42:15 msapiro root[29564]: Stopping MailScanner
> > Oct  5 15:42:15 msapiro MailScanner[4279]: MailScanner child caught a
> SIGHUP
> > Oct  5 15:42:15 msapiro root[29570]: Found a possible dead PID. Stopping
> all MailScanner rogue processes ...
> > Oct  5 15:42:15 msapiro root[29581]: MailScanner stopped
> > Oct  5 15:42:43 msapiro MailScanner[29717]: MailScanner Email Processor
> version 5.1.1 starting...
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file
> /etc/MailScanner/conf.d/00local
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file
> /etc/MailScanner/conf.d/10milter
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file
> /etc/MailScanner/conf.d/99testing
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Reading configuration file
> /etc/MailScanner/conf.d/README
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Read 1501 hostnames from the
> phishing whitelist
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Read 16624 hostnames from
> the phishing blacklists
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Using SpamAssassin results
> cache
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Connected to SpamAssassin
> cache database
> > Oct  5 15:42:43 msapiro MailScanner[29717]: Enabling SpamAssassin
> auto-whitelist functionality...
> > Oct  5 15:42:45 msapiro MailScanner[29717]: Connected to Processing
> Attempts Database
> > Oct  5 15:42:45 msapiro MailScanner[29717]: Found 0 messages in the
> Processing Attempts Database
> > Oct  5 15:42:45 msapiro MailScanner[29717]: lock.pl sees Config
> LockType =  flock
> > Oct  5 15:42:45 msapiro MailScanner[29717]: lock.pl sees have_module =
> 0
> > Oct  5 15:42:45 msapiro MailScanner[29717]: Using locktype = flock
> > Oct  5 15:44:15 msapiro postfix/smtpd[30228]: connect from
> localhost[127.0.0.1]
> > Oct  5 15:44:15 msapiro MSMilter[29436]: Localhost relay detected
> > Oct  5 15:44:57 msapiro postfix/smtpd[30228]: 2444D340120:
> client=localhost[127.0.0.1]
> > Oct  5 15:45:14 msapiro postfix/cleanup[30434]: 2444D340120: message-id=<
> 20181005224457.2444D340120 at msapiro.net>
> > Oct  5 15:45:14 msapiro postfix/qmgr[30689]: 2444D340120: from=<
> mark at msapiro.net>, size=580, nrcpt=1 (queue active)
> > Oct  5 15:45:14 msapiro postfix/local[30540]: 2444D340120: to=<
> mark at msapiro.net>, relay=local, delay=28, delays=28/0/0/0.03, dsn=2.0.0,
> status=sent (delivered to mailbox)
> > Oct  5 15:45:14 msapiro postfix/qmgr[30689]: 2444D340120: removed
> > Oct  5 15:45:21 msapiro postfix/smtpd[30228]: disconnect from
> localhost[127.0.0.1] helo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
>
>
> There is probably something obvious that I'm missing, but I don't know
> what.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181005/8777d7e0/attachment.html>

From mark at msapiro.net  Sat Oct  6 01:14:30 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 05 Oct 2018 18:14:30 -0700
Subject: {Disarmed} Re: Problem setting up MailScanner 5.1.1 milter
 support.
In-Reply-To: <CABu_8zJjm5bv15J+R4WOoMN8dm5mUXER7rGPNNNUM4Ze7ifgSA@mail.gmail.com>
References: <df4b4d9e-721b-9f0b-a0bb-25ac3789f840@msapiro.net>
 <CABu_8zJjm5bv15J+R4WOoMN8dm5mUXER7rGPNNNUM4Ze7ifgSA@mail.gmail.com>
Message-ID: <14DAC011-1AE0-4024-AA15-D66E74ABBA65@msapiro.net>

On October 5, 2018 6:04:25 PM PDT, Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:
>Did you send a test email from localhost? Localhost is an exception in
>milter processing to allow delivery after scanning without creating an
>endless loop.


That's probably it. I'm out now, but I'll report when I get home to test.


-- 
Mark Sapiro <mark at msapiro.net>
Sent from my Not_an_iThing with standards compliant, open source software.

From mark at msapiro.net  Sat Oct  6 04:14:51 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 5 Oct 2018 21:14:51 -0700
Subject: Problem setting up MailScanner 5.1.1 milter support. SOLVED
In-Reply-To: <14DAC011-1AE0-4024-AA15-D66E74ABBA65@msapiro.net>
References: <df4b4d9e-721b-9f0b-a0bb-25ac3789f840@msapiro.net>
 <CABu_8zJjm5bv15J+R4WOoMN8dm5mUXER7rGPNNNUM4Ze7ifgSA@mail.gmail.com>
 <14DAC011-1AE0-4024-AA15-D66E74ABBA65@msapiro.net>
Message-ID: <11cf7b74-df71-56e0-6ce3-4ac09788524b@msapiro.net>

On 10/05/2018 06:14 PM, Mark Sapiro wrote:
> On October 5, 2018 6:04:25 PM PDT, Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:
>> Did you send a test email from localhost? Localhost is an exception in
>> milter processing to allow delivery after scanning without creating an
>> endless loop.
> 
> 
> That's probably it. I'm out now, but I'll report when I get home to test.


I have tested and the issue was sending from localhost. If I connect to
Postfix from a remote IP, everything works as expected.

Thanks.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From mark at msapiro.net  Sun Oct  7 18:17:44 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Sun, 7 Oct 2018 11:17:44 -0700
Subject: Problems with 5.1.1 milter
Message-ID: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>

This is basically just a report of things I encountered with the milter
option in MailScanner 5.1.1. I don't think I have enough information to
actually debug these issues, and for now at least, I have reverted to
the Postfix hold queue option.

I first set up the milter option on a local test server. Mail wasn't
being scanned, but this was because I was submitting the test mail from
localhost. When I submitted mail remotely, all seemed to work well, so I
then set up the milter option on my not too busy production server. I
set it up at about 9:30 p.m. on Friday. It seemed to be working well.

At some point Saturday, I noticed some delays so I began to investigate.

I saw this in mail.log

Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC to
DB2E81180AC8
Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
localhost.localdomain[127.0.0.1]
Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
Connection timed out
Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
inet:127.0.0.1:33333: read error in initial handshake

This seemed to be a one time occurrence. Mail was processed normally until

Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F to
A7D441181110
Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
localhost.localdomain[127.0.0.1]
...
Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
Connection timed out
Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
inet:127.0.0.1:33333: read error in initial handshake
...
Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
unknown[185.36.81.145]
Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
Connection timed out
Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
inet:127.0.0.1:33333: read error in initial handshake

at which point these seemed to occur with every connect even though
'netstat -lntp' showed the milter listening on port

About an hour later, I reverted to the non-milter configuration and
things became normal again.

Also during the 14 hours that the milter was configured, I saw 4 of these

Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ... as it
caused MailScanner to crash several times

I have those 4 messages and have reprocessed them following reversion to
the hold queue method with no problem. I also processed them through my
test server running the milter without crashing MailScanner. On the test
server, I did see

Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
/var/spool/MailScanner/milterout/5ECA5340128, will retry soon...

on 3 of the four messages which remained in milterout, but this may have
been related to the fact that I submitted all 4 in one manual smtp
session and then never submitted any more messages before reverting that
to the hold queue method.

So, I don't think that the "caused MailScanner to crash" issue was
related to the actual message content.

My milter config overrides defaults with

---------------------------------
Incoming Queue Dir = /var/spool/MailScanner/milterin
Outgoing Queue Dir = /var/spool/MailScanner/milterout
MTA = msmail
MSMail Queue Type = short
Milter Scanner = yes
Milter Max Children = 1
---------------------------------

I wonder if people are successfully using this in production or if
people have seen issues such as this?

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From mark at msapiro.net  Sun Oct  7 18:37:40 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Sun, 7 Oct 2018 11:37:40 -0700
Subject: Problems with 5.1.1 milter
In-Reply-To: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
Message-ID: <135ae81f-dbf3-d418-e3e8-6454d28d47d2@msapiro.net>

On 10/07/2018 11:17 AM, Mark Sapiro wrote:
> 
> My milter config overrides defaults with
> 
> ---------------------------------
> Incoming Queue Dir = /var/spool/MailScanner/milterin
> Outgoing Queue Dir = /var/spool/MailScanner/milterout
> MTA = msmail
> MSMail Queue Type = short
> Milter Scanner = yes
> Milter Max Children = 1
> ---------------------------------
> 
> I wonder if people are successfully using this in production or if
> people have seen issues such as this?


Another thing that might be relevant is I also use the opendkim milter
to DKIM sign mail. My Postfix config had
---------------------------------
# Settings for opendkim milter and MailScanner
smtpd_milters           = inet:127.0.0.1:8891 inet:127.0.0.1:33333
non_smtpd_milters       = inet:127.0.0.1:8891
milter_default_action   = accept
milter_protocol		= 2
---------------------------------
Possibly the order is significant, It seems that the way the MailScanner
milter works, it has to be last because if it is first and DISCARDs, the
other milter won't run, but then maybe it would run on the reinjected
mail which might be better as it wouldn't DKIM sign the mail before
possible MailScanner modifications.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From iversons at rushville.k12.in.us  Sun Oct  7 19:36:02 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 7 Oct 2018 15:36:02 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
Message-ID: <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>

Mark,

There's a performance fix in this commit that should help with most of
this.  The crashing is likely from partially written messages in the
milterin queue as a result of not writing the file in a single pass.  I
hope to get a few more issues resolved before doing another release.

https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1



On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net> wrote:

> This is basically just a report of things I encountered with the milter
> option in MailScanner 5.1.1. I don't think I have enough information to
> actually debug these issues, and for now at least, I have reverted to
> the Postfix hold queue option.
>
> I first set up the milter option on a local test server. Mail wasn't
> being scanned, but this was because I was submitting the test mail from
> localhost. When I submitted mail remotely, all seemed to work well, so I
> then set up the milter option on my not too busy production server. I
> set it up at about 9:30 p.m. on Friday. It seemed to be working well.
>
> At some point Saturday, I noticed some delays so I began to investigate.
>
> I saw this in mail.log
>
> Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC to
> DB2E81180AC8
> Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> localhost.localdomain[127.0.0.1]
> Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> Connection timed out
> Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> inet:127.0.0.1:33333: read error in initial handshake
>
> This seemed to be a one time occurrence. Mail was processed normally until
>
> Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F to
> A7D441181110
> Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> localhost.localdomain[127.0.0.1]
> ...
> Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> Connection timed out
> Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> inet:127.0.0.1:33333: read error in initial handshake
> ...
> Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> unknown[185.36.81.145]
> Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> Connection timed out
> Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> inet:127.0.0.1:33333: read error in initial handshake
>
> at which point these seemed to occur with every connect even though
> 'netstat -lntp' showed the milter listening on port
>
> About an hour later, I reverted to the non-milter configuration and
> things became normal again.
>
> Also during the 14 hours that the milter was configured, I saw 4 of these
>
> Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ... as it
> caused MailScanner to crash several times
>
> I have those 4 messages and have reprocessed them following reversion to
> the hold queue method with no problem. I also processed them through my
> test server running the milter without crashing MailScanner. On the test
> server, I did see
>
> Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
> /var/spool/MailScanner/milterout/5ECA5340128, will retry soon...
>
> on 3 of the four messages which remained in milterout, but this may have
> been related to the fact that I submitted all 4 in one manual smtp
> session and then never submitted any more messages before reverting that
> to the hold queue method.
>
> So, I don't think that the "caused MailScanner to crash" issue was
> related to the actual message content.
>
> My milter config overrides defaults with
>
> ---------------------------------
> Incoming Queue Dir = /var/spool/MailScanner/milterin
> Outgoing Queue Dir = /var/spool/MailScanner/milterout
> MTA = msmail
> MSMail Queue Type = short
> Milter Scanner = yes
> Milter Max Children = 1
> ---------------------------------
>
> I wonder if people are successfully using this in production or if
> people have seen issues such as this?
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181007/77756387/attachment.html>

From iversons at rushville.k12.in.us  Sun Oct  7 19:38:21 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 7 Oct 2018 15:38:21 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <135ae81f-dbf3-d418-e3e8-6454d28d47d2@msapiro.net>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <135ae81f-dbf3-d418-e3e8-6454d28d47d2@msapiro.net>
Message-ID: <CABu_8zKedrkKT5ODQ=+y5oxXpZ7qu1VgXoEKQbfF9E7r7Z_vWA@mail.gmail.com>

This is good info, I'll make run some tests alongside other milters and
update the documentation.

On Sun, Oct 7, 2018 at 2:37 PM Mark Sapiro <mark at msapiro.net> wrote:

> On 10/07/2018 11:17 AM, Mark Sapiro wrote:
> >
> > My milter config overrides defaults with
> >
> > ---------------------------------
> > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > MTA = msmail
> > MSMail Queue Type = short
> > Milter Scanner = yes
> > Milter Max Children = 1
> > ---------------------------------
> >
> > I wonder if people are successfully using this in production or if
> > people have seen issues such as this?
>
>
> Another thing that might be relevant is I also use the opendkim milter
> to DKIM sign mail. My Postfix config had
> ---------------------------------
> # Settings for opendkim milter and MailScanner
> smtpd_milters           = inet:127.0.0.1:8891 inet:127.0.0.1:33333
> non_smtpd_milters       = inet:127.0.0.1:8891
> milter_default_action   = accept
> milter_protocol         = 2
> ---------------------------------
> Possibly the order is significant, It seems that the way the MailScanner
> milter works, it has to be last because if it is first and DISCARDs, the
> other milter won't run, but then maybe it would run on the reinjected
> mail which might be better as it wouldn't DKIM sign the mail before
> possible MailScanner modifications.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181007/25bbed96/attachment.html>

From mark at msapiro.net  Sun Oct  7 22:42:41 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Sun, 7 Oct 2018 15:42:41 -0700
Subject: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
Message-ID: <534f962d-922c-7c5b-39dc-14322c79803f@msapiro.net>

On 10/07/2018 12:36 PM, Shawn Iverson via MailScanner wrote:
>
> The crashing is likely from partially written messages in the
> milterin queue as a result of not writing the file in a single pass.


That's likely in at least two of the four messages. In those cases, the
message in quarantine was missing the first line of the topmost
Received: header, and when subsequently testing with those messages, I
recreated the missing line, thus curing the defect.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From mark at msapiro.net  Mon Oct  8 02:17:20 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Sun, 7 Oct 2018 19:17:20 -0700
Subject: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
References: <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
Message-ID: <f49c7569-f857-5bd2-0414-6648417209c8@msapiro.net>

Shawn Iverson wrote:

> There's a performance fix in this commit that should help with most of
> this.  The crashing is likely from partially written messages in the
> milterin queue as a result of not writing the file in a single pass.  I
> hope to get a few more issues resolved before doing another release.
> 
> https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1


I've been doing a bit more testing. I installed the above change, and
even with that I see this issue.

I submit a message whose headers end with

MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="b1_f5bca29580e2b9cb455f487aa1a5bd28"

And the resultant message after MailScanner has headers ending with

MIME-Version: 1.0
Content-Type: multipart/alternative;
X-msapiro-MailScanner-ID: 12CA95A5DC.AD7FE
X-msapiro-MailScanner: Found to be clean
X-msapiro-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
        score=1.132, required 6, DKIM_SIGNED 0.10,
        HEADER_FROM_DIFFERENT_DOMAINS 0.00, MIME_NO_TEXT 1.00,
        RCVD_IN_DNSWL_NONE -0.00, T_DKIM_INVALID 0.01, T_MIME_MALF 0.01,
        T_TVD_MIME_NO_HEADERS 0.01, UNPARSEABLE_RELAY 0.00)
X-msapiro-MailScanner-SpamScore: s
X-msapiro-MailScanner-From: mark at msapiro.net
X-Spam-Status: No
        boundary="b1_f5bca29580e2b9cb455f487aa1a5bd28"

I.e. the MailScanner report headers are inserted before the last line of
the headers rather than appended after. This is not always a problem,
but in this case, it causes the 'boundary=' to be separated from the
'Content-Type:' which is a problem.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From iversons at rushville.k12.in.us  Mon Oct  8 04:32:59 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Mon, 8 Oct 2018 00:32:59 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <f49c7569-f857-5bd2-0414-6648417209c8@msapiro.net>
References: <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
 <f49c7569-f857-5bd2-0414-6648417209c8@msapiro.net>
Message-ID: <CABu_8zJ6FGykY8c8zabSZWKbJSr7fVjrUDrJC5hP1sGQsg8vyg@mail.gmail.com>

Yes, that is definitely a problem.  This must be a bug in msmail.pm causing
this.  The header functions had to be rewritten to be postfix independent.
It is not checking for a continuation line at the end of the header. I will
take a look.

On Sun, Oct 7, 2018 at 10:17 PM Mark Sapiro <mark at msapiro.net> wrote:

> Shawn Iverson wrote:
>
> > There's a performance fix in this commit that should help with most of
> > this.  The crashing is likely from partially written messages in the
> > milterin queue as a result of not writing the file in a single pass.  I
> > hope to get a few more issues resolved before doing another release.
> >
> >
> https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
>
>
> I've been doing a bit more testing. I installed the above change, and
> even with that I see this issue.
>
> I submit a message whose headers end with
>
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>         boundary="b1_f5bca29580e2b9cb455f487aa1a5bd28"
>
> And the resultant message after MailScanner has headers ending with
>
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> X-msapiro-MailScanner-ID: 12CA95A5DC.AD7FE
> X-msapiro-MailScanner: Found to be clean
> X-msapiro-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
>         score=1.132, required 6, DKIM_SIGNED 0.10,
>         HEADER_FROM_DIFFERENT_DOMAINS 0.00, MIME_NO_TEXT 1.00,
>         RCVD_IN_DNSWL_NONE -0.00, T_DKIM_INVALID 0.01, T_MIME_MALF 0.01,
>         T_TVD_MIME_NO_HEADERS 0.01, UNPARSEABLE_RELAY 0.00)
> X-msapiro-MailScanner-SpamScore: s
> X-msapiro-MailScanner-From: mark at msapiro.net
> X-Spam-Status: No
>         boundary="b1_f5bca29580e2b9cb455f487aa1a5bd28"
>
> I.e. the MailScanner report headers are inserted before the last line of
> the headers rather than appended after. This is not always a problem,
> but in this case, it causes the 'boundary=' to be separated from the
> 'Content-Type:' which is a problem.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/aeb0bedd/attachment.html>

From marek.gorny at bolix.pl  Mon Oct  8 09:32:00 2018
From: marek.gorny at bolix.pl (=?iso-8859-2?Q?Marek_G=F3rny?=)
Date: Mon, 8 Oct 2018 09:32:00 +0000
Subject: ClamAV Perl module not found
Message-ID: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>

Hi,
OpenSUSE Leap 15 with MailScanner 5.1.1 , Postfix 3.3.1 and perl 5.26, ClamAV 0.100.1
I have problem with clamAV module:

Oct 08 11:04:02 mail2 MailScanner[23932]: ClamAV Perl module not found
MailScanner -v:
missing Mail::ClamAV

When I try to install using CPAN:
Configuring C/CO/CONVERTER/Mail-ClamAV-0.29.tar.gz with Makefile.PL
The clamav version you are using is too old. Please upgrade to at least 0.95.1
No 'Makefile' created  CONVERTER/Mail-ClamAV-0.29.tar.gz
  /usr/bin/perl Makefile.PL INSTALLDIRS=site -- NOT OK
Failed during this command:
CONVERTER/Mail-ClamAV-0.29.tar.gz            : writemakefile NO -- No 'Makefile' created

Using rpm:
rpm -i perl-Mail-ClamAV-0.29-2.x86_64.rpm.1
error: Failed dependencies:
        perl >= 0:5.006001 is needed by perl-Mail-ClamAV-0.29-2.x86_64

there was a thread on github:
https://github.com/MailScanner/v5/issues/132


Any advice, please?
Thanks
Marek


[Bolix]

[BO_Lokalizacja]        [RODO] <https://bolix.pl/pl/page/14>    [Teraz_Polska] <https://bolix.pl/pl/open-file/1098>
[Facebook]<https://www.facebook.com/bolixsa>

UWAGA: Niniejsza korespondencja przeznaczona jest wy??cznie dla osoby lub podmiotu, do kt?rego jest zaadresowana i mo?e zawiera? tre?ci chronione przepisami prawa. Wgl?d w tre?? wiadomo?ci otrzymanej omy?kowo, dalsze jej przekazywanie, rozpowszechnianie lub innego rodzaju wykorzystanie, b?d? podj?cie jakichkolwiek dzia?a? w oparciu o zawarte w niej informacje przez osob? lub podmiot nie b?d?cy adresatem, jest niedozwolone. Odbiorca korespondencji, kt?ry otrzyma? j? omy?kowo, proszony jest o zawiadomienie nadawcy i usuni?cie tego materia?u z komputera.

ATTENTION:  The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, Or taking of any action in reliance upon, this information by person or entity other than the intended recipient is not permitted. If you received this in error, please contact the sender and delete the material from any computer.

[Las] Prosz? pomy?l o ?rodowisku przed wydrukowaniem tego maila. Please Consider the Environment before printing this Email
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/38b51aaa/attachment.html>

From dobril at stanga.net  Mon Oct  8 10:48:14 2018
From: dobril at stanga.net (DobriL Dobrilov)
Date: Mon, 8 Oct 2018 13:48:14 +0300
Subject: Message attempted to kill MailScanner
In-Reply-To: <006e01d45bdb$5c4072c0$14c15840$@stanga.net>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
 <006e01d45bdb$5c4072c0$14c15840$@stanga.net>
Message-ID: <00ef01d45ef4$6a4decf0$3ee9c6d0$@stanga.net>

Does anyone know how I can solve this issue.

 

 

 

 



Dobril Dobrilov


IT Manager


 <mailto:dobril at stanga.net> dobril at stanga.net






43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
Mobile: +359 878 749 387

 




We shape Digital  <http://www.stanga.net> www.stanga.net




We re-invent Video  <http://www.bsbvision.com> www.bsbvision.com




We build Apps  <http://www.shanga.co> www.shanga.co




We support Start-Ups  <http://www.mysbar.net> www.mysbar.net

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of DobriL Dobrilov
Sent: Thursday, October 4, 2018 3:11 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Message attempted to kill MailScanner

 

Hello,

 

This is the error message which MailScanner show in debug mode, after that immediately quit.

 

 

Wide character in subroutine entry at /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616



From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Wednesday, October 3, 2018 6:04 PM
To: mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
Cc: Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> >
Subject: Re: Message attempted to kill MailScanner

 

Debugging...

 

Enable Debug=yes in MailScanner.conf

 

Empty all queues

Stop MailScanner daemons

 

Submit the suspect message to mta using appropriate mta tool

 

Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog

 

You can process winmail.dat yourself using the tnef binary utility on your server.

 

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

 

I just received error notification from MailScanner.

 

Other Bad Content Detected ?

Report: MailScanner: Message attempted to kill MailScanner

?

 

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=? 

 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3762 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 853 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0005.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1286 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0006.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 930 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0007.jpg>

From iversons at rushville.k12.in.us  Mon Oct  8 11:57:39 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Mon, 8 Oct 2018 07:57:39 -0400
Subject: Message attempted to kill MailScanner
In-Reply-To: <00ef01d45ef4$6a4decf0$3ee9c6d0$@stanga.net>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
 <006e01d45bdb$5c4072c0$14c15840$@stanga.net>
 <00ef01d45ef4$6a4decf0$3ee9c6d0$@stanga.net>
Message-ID: <CABu_8zKvv4-Vvx2+HRFNAEXrKnW58AZw7KfQtvY+xBmrxNc0Pg@mail.gmail.com>

I haven't had a chance to look at it yet (working 2 jobs at the moment),
but as soon as I can I will take a look, unless someone else happens to
jump in.

On Mon, Oct 8, 2018 at 6:48 AM DobriL Dobrilov <dobril at stanga.net> wrote:

> Does anyone know how I can solve this issue.
>
>
>
>
>
>
>
>
>
> *Dobril Dobrilov*
>
> IT Manager
>
> *dobril at stanga.net <dobril at stanga.net>*
>
> [image: StangaOne1 unit fo STANGA AD]
>
> 43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
> Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
> Mobile: +359 878 749 387
>
>
>
> [image: StangaOne1]
>
> We shape Digital *www.stanga.net* <http://www.stanga.net>
>
> [image: BSB]
>
> We re-invent Video *www.bsbvision.com* <http://www.bsbvision.com>
>
> [image: Shanga]
>
> We build Apps *www.shanga.co* <http://www.shanga.co>
>
> [image: S*Bar]
>
> We support Start-Ups *www.mysbar.net* <http://www.mysbar.net>
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+dobril=
> stanga.net at lists.mailscanner.info] *On Behalf Of *DobriL Dobrilov
> *Sent:* Thursday, October 4, 2018 3:11 PM
> *To:* 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
> *Subject:* RE: Message attempted to kill MailScanner
>
>
>
> Hello,
>
>
>
> This is the error message which MailScanner show in debug mode, after that
> immediately quit.
>
>
>
>
>
> Wide character in subroutine entry at
> /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616
>
> *From:* MailScanner [
> mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info
> <mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info>] *On
> Behalf Of *Shawn Iverson via MailScanner
> *Sent:* Wednesday, October 3, 2018 6:04 PM
> *To:* mailscanner at lists.mailscanner.info
> *Cc:* Shawn Iverson <iversons at rushville.k12.in.us>
> *Subject:* Re: Message attempted to kill MailScanner
>
>
>
> Debugging...
>
>
>
> Enable Debug=yes in MailScanner.conf
>
>
>
> Empty all queues
>
> Stop MailScanner daemons
>
>
>
> Submit the suspect message to mta using appropriate mta tool
>
>
>
> Run /usr/sbin/MailScanner, let it try to process the message, and capture
> all output and the output in /var/log/maillog
>
>
>
> You can process winmail.dat yourself using the tnef binary utility on your
> server.
>
>
>
> On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net> wrote:
>
> Hello,
>
>
>
> I just received error notification from MailScanner.
>
>
>
> Other Bad Content Detected ?
>
> Report: MailScanner: Message attempted to kill MailScanner
>
> ?
>
>
>
> Then I try to review the mail from archive. Temporary bypass scanning and
> deliver to my box. The mail contain another attached email which contain
> attached email too which  finally contain JPG image.
>
> I try to forward to myself this time I get:
>
> The following e-mails were found to have: Other Bad Content Detected -
>
>
>
> The question is how I can debug those email and to find what exactly cause
> the issue.
>
> Possible reasons for me are:
>
> -       Bad character in the subject  because the Subject is
>
> ?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=
>
> =?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=
>
> =?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=?
>
>
>
> -       TNEF just cannot process attached email. From this perspective
> how I can extract winmail.dat from the message and to process it manually
> with TNEF.
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x1171
>
> iversons at rushville.k12.in.us
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3762 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 853 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1286 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 930 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0004.jpg>

From mark at msapiro.net  Mon Oct  8 17:26:21 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 8 Oct 2018 10:26:21 -0700
Subject: ClamAV Perl module not found
In-Reply-To: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>
References: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>
Message-ID: <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>

On 10/08/2018 02:32 AM, Marek G?rny wrote:
> 
> When I try to install using CPAN:
> 
> Configuring C/CO/CONVERTER/Mail-ClamAV-0.29.tar.gz with Makefile.PL
> 
> The clamav version you are using is too old. Please upgrade to at least
> 0.95.1


Apparently you can't install Mail::ClamAV via CPAN because your base
ClamAV installation is too old. You need to upgrade that first. I don't
know how to do that on OpenSUSE, but
<https://software.opensuse.org/package/clamav> may help.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From marek.gorny at bolix.pl  Mon Oct  8 18:26:40 2018
From: marek.gorny at bolix.pl (=?utf-8?B?TWFyZWsgR8Ozcm55?=)
Date: Mon, 8 Oct 2018 18:26:40 +0000
Subject: ClamAV Perl module not found
In-Reply-To: <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>
References: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>,
 <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>
Message-ID: <1B0991DB-5396-4E6F-AC4C-BCE96FBC6958@bolix.pl>

I know, but I have ClamAV 0.100.1 already installed and is working well;)


Marek G?rny

> Wiadomo?? napisana przez Mark Sapiro <mark at msapiro.net> w dniu 08.10.2018, o godz. 19:27:
>
>> On 10/08/2018 02:32 AM, Marek G?rny wrote:
>>
>> When I try to install using CPAN:
>>
>> Configuring C/CO/CONVERTER/Mail-ClamAV-0.29.tar.gz with Makefile.PL
>>
>> The clamav version you are using is too old. Please upgrade to at least
>> 0.95.1
>
>
> Apparently you can't install Mail::ClamAV via CPAN because your base
> ClamAV installation is too old. You need to upgrade that first. I don't
> know how to do that on OpenSUSE, but
> <https://software.opensuse.org/package/clamav> may help.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
[Bolix]

[BO_Lokalizacja]        [RODO]  <https://bolix.pl/pl/page/14> [Teraz_Polska] <https://bolix.pl/pl/open-file/1098>
[Facebook]<https://www.facebook.com/bolixsa>

UWAGA: Niniejsza korespondencja przeznaczona jest wy??cznie dla osoby lub podmiotu, do kt?rego jest zaadresowana i mo?e zawiera? tre?ci chronione przepisami prawa. Wgl?d w tre?? wiadomo?ci otrzymanej omy?kowo, dalsze jej przekazywanie, rozpowszechnianie lub innego rodzaju wykorzystanie, b?d? podj?cie jakichkolwiek dzia?a? w oparciu o zawarte w niej informacje przez osob? lub podmiot nie b?d?cy adresatem, jest niedozwolone. Odbiorca korespondencji, kt?ry otrzyma? j? omy?kowo, proszony jest o zawiadomienie nadawcy i usuni?cie tego materia?u z komputera.

ATTENTION:  The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, Or taking of any action in reliance upon, this information by person or entity other than the intended recipient is not permitted. If you received this in error, please contact the sender and delete the material from any computer.

[Las] Prosz? pomy?l o ?rodowisku przed wydrukowaniem tego maila. Please Consider the Environment before printing this Email

From mark at msapiro.net  Mon Oct  8 18:38:09 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 8 Oct 2018 11:38:09 -0700
Subject: ClamAV Perl module not found
In-Reply-To: <1B0991DB-5396-4E6F-AC4C-BCE96FBC6958@bolix.pl>
References: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>
 <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>
 <1B0991DB-5396-4E6F-AC4C-BCE96FBC6958@bolix.pl>
Message-ID: <2fd64bca-bdf1-a033-e0bd-e14916bc2796@msapiro.net>

On 10/08/2018 11:26 AM, Marek G?rny wrote:
> I know, but I have ClamAV 0.100.1 already installed and is working well;)


Have you also installed clamav-devel? See
<https://github.com/MailScanner/v5/issues/132#issuecomment-354031101>.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From marek.gorny at bolix.pl  Tue Oct  9 06:58:56 2018
From: marek.gorny at bolix.pl (=?utf-8?B?TWFyZWsgR8Ozcm55?=)
Date: Tue, 9 Oct 2018 06:58:56 +0000
Subject: ClamAV Perl module not found
In-Reply-To: <2fd64bca-bdf1-a033-e0bd-e14916bc2796@msapiro.net>
References: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>
 <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>
 <1B0991DB-5396-4E6F-AC4C-BCE96FBC6958@bolix.pl>
 <2fd64bca-bdf1-a033-e0bd-e14916bc2796@msapiro.net>
Message-ID: <a7f6446fa6dc4d71a97c4420d186803c@BolixEx2.bolix.local>

Hi,
Yes clamav-devel is installed.

Marek
-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+marek.gorny=bolix.pl at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Monday, October 8, 2018 8:38 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: ClamAV Perl module not found

On 10/08/2018 11:26 AM, Marek G?rny wrote:
> I know, but I have ClamAV 0.100.1 already installed and is working
> well;)


Have you also installed clamav-devel? See <https://github.com/MailScanner/v5/issues/132#issuecomment-354031101>.

--
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

[Bolix]

[BO_Lokalizacja]        [RODO]  <https://bolix.pl/pl/page/14> [Teraz_Polska] <https://bolix.pl/pl/open-file/1098>
[Facebook]<https://www.facebook.com/bolixsa>

UWAGA: Niniejsza korespondencja przeznaczona jest wy??cznie dla osoby lub podmiotu, do kt?rego jest zaadresowana i mo?e zawiera? tre?ci chronione przepisami prawa. Wgl?d w tre?? wiadomo?ci otrzymanej omy?kowo, dalsze jej przekazywanie, rozpowszechnianie lub innego rodzaju wykorzystanie, b?d? podj?cie jakichkolwiek dzia?a? w oparciu o zawarte w niej informacje przez osob? lub podmiot nie b?d?cy adresatem, jest niedozwolone. Odbiorca korespondencji, kt?ry otrzyma? j? omy?kowo, proszony jest o zawiadomienie nadawcy i usuni?cie tego materia?u z komputera.

ATTENTION:  The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, Or taking of any action in reliance upon, this information by person or entity other than the intended recipient is not permitted. If you received this in error, please contact the sender and delete the material from any computer.

[Las] Prosz? pomy?l o ?rodowisku przed wydrukowaniem tego maila. Please Consider the Environment before printing this Email

From marek.gorny at bolix.pl  Wed Oct 10 07:09:50 2018
From: marek.gorny at bolix.pl (=?utf-8?B?TWFyZWsgR8Ozcm55?=)
Date: Wed, 10 Oct 2018 07:09:50 +0000
Subject: FW: ClamAV Perl module not found
References: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>
 <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>
 <1B0991DB-5396-4E6F-AC4C-BCE96FBC6958@bolix.pl>
 <2fd64bca-bdf1-a033-e0bd-e14916bc2796@msapiro.net> 
Message-ID: <41ba2539c67a4017a2b9ba74f145e527@BolixEx2.bolix.local>

Hi,
I have install perl-Mail-ClamAV-0.29-2.x86_64.rpm package with --nodeps option.
Now i can see package:

# rpm -q -l -p perl-Mail-ClamAV-0.29-2.x86_64.rpm
/usr/lib64/perl5/vendor_perl/Mail
/usr/lib64/perl5/vendor_perl/Mail/ClamAV.pm
/usr/lib64/perl5/vendor_perl/auto/Mail
/usr/lib64/perl5/vendor_perl/auto/Mail/ClamAV
/usr/lib64/perl5/vendor_perl/auto/Mail/ClamAV/ClamAV.bs
/usr/lib64/perl5/vendor_perl/auto/Mail/ClamAV/ClamAV.so
/usr/share/doc/perl-Mail-ClamAV-0.29
/usr/share/doc/perl-Mail-ClamAV-0.29/Changes
/usr/share/doc/perl-Mail-ClamAV-0.29/INSTALL
/usr/share/doc/perl-Mail-ClamAV-0.29/MANIFEST
/usr/share/doc/perl-Mail-ClamAV-0.29/META.yml
/usr/share/doc/perl-Mail-ClamAV-0.29/README
/usr/share/man/man3/Mail::ClamAV.3pm.gz

But still in MailScanner no results:
MailScanner -v
missing Mail::ClamAV


Marek G?rny
Specjalista ds. informatyki/
IT Specialist

-----Original Message-----
From: Marek G?rny
Sent: Tuesday, October 9, 2018 8:59 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: ClamAV Perl module not found

Hi,
Yes clamav-devel is installed.

Marek
-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+marek.gorny=bolix.pl at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Monday, October 8, 2018 8:38 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: ClamAV Perl module not found

On 10/08/2018 11:26 AM, Marek G?rny wrote:
> I know, but I have ClamAV 0.100.1 already installed and is working
> well;)


Have you also installed clamav-devel? See <https://github.com/MailScanner/v5/issues/132#issuecomment-354031101>.

--
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

[Bolix]

[BO_Lokalizacja]        [RODO]  <https://bolix.pl/pl/page/14> [Teraz_Polska] <https://bolix.pl/pl/open-file/1098>
[Facebook]<https://www.facebook.com/bolixsa>

UWAGA: Niniejsza korespondencja przeznaczona jest wy??cznie dla osoby lub podmiotu, do kt?rego jest zaadresowana i mo?e zawiera? tre?ci chronione przepisami prawa. Wgl?d w tre?? wiadomo?ci otrzymanej omy?kowo, dalsze jej przekazywanie, rozpowszechnianie lub innego rodzaju wykorzystanie, b?d? podj?cie jakichkolwiek dzia?a? w oparciu o zawarte w niej informacje przez osob? lub podmiot nie b?d?cy adresatem, jest niedozwolone. Odbiorca korespondencji, kt?ry otrzyma? j? omy?kowo, proszony jest o zawiadomienie nadawcy i usuni?cie tego materia?u z komputera.

ATTENTION:  The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, Or taking of any action in reliance upon, this information by person or entity other than the intended recipient is not permitted. If you received this in error, please contact the sender and delete the material from any computer.

[Las] Prosz? pomy?l o ?rodowisku przed wydrukowaniem tego maila. Please Consider the Environment before printing this Email

From mmmm82 at gmail.com  Wed Oct 10 09:00:10 2018
From: mmmm82 at gmail.com (Monis Monther)
Date: Wed, 10 Oct 2018 12:00:10 +0300
Subject: Preventing Multiple HTML signatures
Message-ID: <CAAyHf+oV9Vbr9ZjXynNwazii0_0UWEA6Q9SHFMtJ4sBRd9i0BA@mail.gmail.com>

Hi,

We have been trying to prevent inserting signatures when replying in the
same email.

We have the following settings in MailScanner.conf

Attach Image To HTML Message Only = yes
Allow Multiple HTML Signatures = no

My sig file contains <img alt="MailScanner Signature orgname"
src="cid:image.png"></img>

orgname is the same as %org-name% in the MailScanner.conf

What ever I change in the sig file is reflected noramlly as intended, the
only problem is that it keeps signing the messages .

-- 
Best Regards
Monis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181010/46ee0676/attachment.html>

From phil.randal at hoopleltd.co.uk  Wed Oct 10 09:32:10 2018
From: phil.randal at hoopleltd.co.uk (Randal, Phil)
Date: Wed, 10 Oct 2018 09:32:10 +0000
Subject: ClamAV Perl module not found
In-Reply-To: <41ba2539c67a4017a2b9ba74f145e527@BolixEx2.bolix.local>
References: <71db53e532ff49bba4bb7ac226f2f6f8@BolixEx2.bolix.local>
 <771f0a3b-c980-479e-4f45-c16edb95bc37@msapiro.net>
 <1B0991DB-5396-4E6F-AC4C-BCE96FBC6958@bolix.pl>
 <2fd64bca-bdf1-a033-e0bd-e14916bc2796@msapiro.net>
 <41ba2539c67a4017a2b9ba74f145e527@BolixEx2.bolix.local>
Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B850108C18585@HC-EXMBX04.herefordshire.gov.uk>

You really shouldn't be using Mail::ClamAV at all.

It has a huge memory load and performance implications.

It should have been deprecated from MailScanner years ago, and all reference to it removed.

It's best to use clamd.

Cheers,

Phil

-----Original Message-----
From: MailScanner <mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info> On Behalf Of Marek G?rny
Sent: 10 October 2018 08:10
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: FW: ClamAV Perl module not found

Hi,
I have install perl-Mail-ClamAV-0.29-2.x86_64.rpm package with --nodeps option.
Now i can see package:

# rpm -q -l -p perl-Mail-ClamAV-0.29-2.x86_64.rpm
/usr/lib64/perl5/vendor_perl/Mail
/usr/lib64/perl5/vendor_perl/Mail/ClamAV.pm
/usr/lib64/perl5/vendor_perl/auto/Mail
/usr/lib64/perl5/vendor_perl/auto/Mail/ClamAV
/usr/lib64/perl5/vendor_perl/auto/Mail/ClamAV/ClamAV.bs
/usr/lib64/perl5/vendor_perl/auto/Mail/ClamAV/ClamAV.so
/usr/share/doc/perl-Mail-ClamAV-0.29
/usr/share/doc/perl-Mail-ClamAV-0.29/Changes
/usr/share/doc/perl-Mail-ClamAV-0.29/INSTALL
/usr/share/doc/perl-Mail-ClamAV-0.29/MANIFEST
/usr/share/doc/perl-Mail-ClamAV-0.29/META.yml
/usr/share/doc/perl-Mail-ClamAV-0.29/README
/usr/share/man/man3/Mail::ClamAV.3pm.gz

But still in MailScanner no results:
MailScanner -v
missing Mail::ClamAV


Marek G?rny
Specjalista ds. informatyki/
IT Specialist

-----Original Message-----
From: Marek G?rny
Sent: Tuesday, October 9, 2018 8:59 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: ClamAV Perl module not found

Hi,
Yes clamav-devel is installed.

Marek
-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+marek.gorny=bolix.pl at lists.mailscanner.info] On Behalf Of Mark Sapiro
Sent: Monday, October 8, 2018 8:38 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: ClamAV Perl module not found

On 10/08/2018 11:26 AM, Marek G?rny wrote:
> I know, but I have ClamAV 0.100.1 already installed and is working
> well;)


Have you also installed clamav-devel? See <https://github.com/MailScanner/v5/issues/132#issuecomment-354031101>.

--
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

[Bolix]

[BO_Lokalizacja]        [RODO]  <https://bolix.pl/pl/page/14> [Teraz_Polska] <https://bolix.pl/pl/open-file/1098>
[Facebook]<https://www.facebook.com/bolixsa>

UWAGA: Niniejsza korespondencja przeznaczona jest wy??cznie dla osoby lub podmiotu, do kt?rego jest zaadresowana i mo?e zawiera? tre?ci chronione przepisami prawa. Wgl?d w tre?? wiadomo?ci otrzymanej omy?kowo, dalsze jej przekazywanie, rozpowszechnianie lub innego rodzaju wykorzystanie, b?d? podj?cie jakichkolwiek dzia?a? w oparciu o zawarte w niej informacje przez osob? lub podmiot nie b?d?cy adresatem, jest niedozwolone. Odbiorca korespondencji, kt?ry otrzyma? j? omy?kowo, proszony jest o zawiadomienie nadawcy i usuni?cie tego materia?u z komputera.

ATTENTION:  The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, Or taking of any action in reliance upon, this information by person or entity other than the intended recipient is not permitted. If you received this in error, please contact the sender and delete the material from any computer.

[Las] Prosz? pomy?l o ?rodowisku przed wydrukowaniem tego maila. Please Consider the Environment before printing this Email


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."

From iversons at rushville.k12.in.us  Wed Oct 10 10:47:13 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 10 Oct 2018 06:47:13 -0400
Subject: Preventing Multiple HTML signatures
In-Reply-To: <CAAyHf+oV9Vbr9ZjXynNwazii0_0UWEA6Q9SHFMtJ4sBRd9i0BA@mail.gmail.com>
References: <CAAyHf+oV9Vbr9ZjXynNwazii0_0UWEA6Q9SHFMtJ4sBRd9i0BA@mail.gmail.com>
Message-ID: <CABu_8zL4_SgrbNxX15JVByxKFTFfZDHcM6tK55GTn3zhiq0eLQ@mail.gmail.com>

Monis,

It looks to me you are doing everything right, but it is not working.  I am
wondering if this is a bug.  I am going to open an issue for you so that we
can work on this and run some tests.

On Wed, Oct 10, 2018 at 5:00 AM Monis Monther <mmmm82 at gmail.com> wrote:

> Hi,
>
> We have been trying to prevent inserting signatures when replying in the
> same email.
>
> We have the following settings in MailScanner.conf
>
> Attach Image To HTML Message Only = yes
> Allow Multiple HTML Signatures = no
>
> My sig file contains <img alt="MailScanner Signature orgname"
> src="cid:image.png"></img>
>
> orgname is the same as %org-name% in the MailScanner.conf
>
> What ever I change in the sig file is reflected noramlly as intended, the
> only problem is that it keeps signing the messages .
>
> --
> Best Regards
> Monis
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181010/d1144694/attachment.html>

From mmmm82 at gmail.com  Wed Oct 10 11:20:48 2018
From: mmmm82 at gmail.com (Monis Monther)
Date: Wed, 10 Oct 2018 14:20:48 +0300
Subject: Preventing Multiple HTML signatures
In-Reply-To: <CABu_8zL4_SgrbNxX15JVByxKFTFfZDHcM6tK55GTn3zhiq0eLQ@mail.gmail.com>
References: <CAAyHf+oV9Vbr9ZjXynNwazii0_0UWEA6Q9SHFMtJ4sBRd9i0BA@mail.gmail.com>
 <CABu_8zL4_SgrbNxX15JVByxKFTFfZDHcM6tK55GTn3zhiq0eLQ@mail.gmail.com>
Message-ID: <CAAyHf+ryC4VFtt8+pvQoJWxyBcVXzE_dVKbL-zs0uoQ2FKTXcA@mail.gmail.com>

Hi Shawn,

Thanks for your reply, My mailscanner version is 5.0.7

Module versions are:
1.01    AnyDBM_File
1.30    Archive::Zip
0.29    bignum
1.26    Carp
2.061   Compress::Zlib
1.119   Convert::BinHex
0.18    Convert::TNEF
2.145   Data::Dumper
2.30    Date::Parse
1.04    DirHandle
1.11    Fcntl
2.84    File::Basename
2.23    File::Copy
2.02    FileHandle
2.09    File::Path
0.2301  File::Temp
0.92    Filesys::Df
3.69    HTML::Entities
3.71    HTML::Parser
3.69    HTML::TokeParser
1.16    IO::File
1.15    IO::Pipe
2.12    Mail::Header
1.998   Math::BigInt
0.2603  Math::BigRat
3.13    MIME::Base64
5.505   MIME::Decoder
5.505   MIME::Decoder::UU
5.505   MIME::Head
5.505   MIME::Parser
3.13    MIME::QuotedPrint
5.505   MIME::Tools
0.18    Net::CIDR
1.26    Net::IP
0.19    OLE::Storage_Lite
1.04    Pod::Escapes
3.28    Pod::Simple
1.30    POSIX
1.27    Scalar::Util
2.010   Socket
2.45    Storable
1.5     Sys::Hostname::Long
0.33    Sys::Syslog
1.48    Test::Pod
1.302128        Test::Simple
1.9725  Time::HiRes
1.02    Time::localtime

Optional module versions are:
1.92    Archive::Tar
0.29    bignum
2.06    Business::ISBN
20120719.001    Business::ISBN::Data
1.22    Data::Dump
1.83    DB_File
1.39    DBD::SQLite
1.627   DBI
1.17    Digest
1.03    Digest::HMAC
2.52    Digest::MD5
2.13    Digest::SHA1
1.01    Encode::Detect
0.17020 Error
0.280206        ExtUtils::CBuilder
3.18    ExtUtils::ParseXS
2.4     Getopt::Long
0.53    Inline
1.08    IO::String
1.10    IO::Zlib
2.28    IP::Country
0.29    Mail::ClamAV
3.004000        Mail::SpamAssassin
v2.008  Mail::SPF
1.999001        Mail::SPF::Query
0.4005  Module::Build
0.21    Net::CIDR::Lite
0.72    Net::DNS
v0.003  Net::DNS::Resolver::Programmable
0.56    Net::LDAP
 4.069  NetAddr::IP
1.967009        Parse::RecDescent
missing SAVI
3.28    Test::Harness
1.23    Test::Manifest
2.02    Text::Balanced
1.60    URI
0.9907  version
0.84    YAML


On Wed, Oct 10, 2018 at 1:48 PM Shawn Iverson via MailScanner <
mailscanner at lists.mailscanner.info> wrote:

> Monis,
>
> It looks to me you are doing everything right, but it is not working.  I
> am wondering if this is a bug.  I am going to open an issue for you so that
> we can work on this and run some tests.
>
> On Wed, Oct 10, 2018 at 5:00 AM Monis Monther <mmmm82 at gmail.com> wrote:
>
>> Hi,
>>
>> We have been trying to prevent inserting signatures when replying in the
>> same email.
>>
>> We have the following settings in MailScanner.conf
>>
>> Attach Image To HTML Message Only = yes
>> Allow Multiple HTML Signatures = no
>>
>> My sig file contains <img alt="MailScanner Signature orgname"
>> src="cid:image.png"></img>
>>
>> orgname is the same as %org-name% in the MailScanner.conf
>>
>> What ever I change in the sig file is reflected noramlly as intended, the
>> only problem is that it keeps signing the messages .
>>
>> --
>> Best Regards
>> Monis
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Best Regards
Monis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181010/b6ed4f25/attachment.html>

From nerijus at users.sourceforge.net  Thu Oct 11 09:22:13 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Thu, 11 Oct 2018 12:22:13 +0300
Subject: esets false positive
Message-ID: <Mahogany-0.68.0-19044-20181011-122213.01@nerijus.sat.lt>

Hello,

I use latest mailscanner 5.1.1-1 with esets. It works OK, but occasionally
it "detects" viruses in harmless files. For example:

Oct 11 11:55:18 mail MailScanner[3063]: New Batch: Scanning 1 messages, 4623339 bytes
Oct 11 11:55:19 mail MailScanner[3063]: Virus and Content Scanning: Starting
Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
Oct 11 11:55:25 mail MailScanner[3063]: Virus Scanning: esets found 17 infections
Oct 11 11:55:26 mail MailScanner[3063]: Infected message 9231B2A14054.A15A2 came from 192.168.x.x
Oct 11 11:55:26 mail MailScanner[3063]: Virus Scanning: Found 17 viruses

While a real virus output looks like this:
Oct 11 01:39:44 mail MailScanner[4184]: New Batch: Scanning 1 messages, 2104 bytes
Oct 11 01:39:44 mail MailScanner[4184]: Virus and Content Scanning: Starting
Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: esets found 3 infections
Oct 11 01:39:49 mail MailScanner[4184]: Infected message EF7F72A14053.A770C came from 5.2.x.x
Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: Found 3 viruses

How do I debug this?

Regards,
Nerijus

From nerijus at users.sourceforge.net  Thu Oct 11 09:43:04 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Thu, 11 Oct 2018 12:43:04 +0300
Subject: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>

Hello,

I had a few such messages in maillog:

Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997: milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter triggers DISCARD action; from=<g at example.com> to=<other at example.com> proto=ESMTP helo=<g.example.com>

The message was sent to me and one other email address. I got it, but other didn't,
and I don't see anything more in logs, so it seems the message was lost.
Is is related to this issue?

Regards,
Nerijus

On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> Mark,
> 
> There's a performance fix in this commit that should help with most of
> this.  The crashing is likely from partially written messages in the
> milterin queue as a result of not writing the file in a single pass.  I
> hope to get a few more issues resolved before doing another release.
> 
> https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> 
> 
> 
> On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net> wrote:
> 
> > This is basically just a report of things I encountered with the milter
> > option in MailScanner 5.1.1. I don't think I have enough information to
> > actually debug these issues, and for now at least, I have reverted to
> > the Postfix hold queue option.
> >
> > I first set up the milter option on a local test server. Mail wasn't
> > being scanned, but this was because I was submitting the test mail from
> > localhost. When I submitted mail remotely, all seemed to work well, so I
> > then set up the milter option on my not too busy production server. I
> > set it up at about 9:30 p.m. on Friday. It seemed to be working well.
> >
> > At some point Saturday, I noticed some delays so I began to investigate.
> >
> > I saw this in mail.log
> >
> > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC to
> > DB2E81180AC8
> > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > localhost.localdomain[127.0.0.1]
> > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > Connection timed out
> > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > inet:127.0.0.1:33333: read error in initial handshake
> >
> > This seemed to be a one time occurrence. Mail was processed normally until
> >
> > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F to
> > A7D441181110
> > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > localhost.localdomain[127.0.0.1]
> > ...
> > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > Connection timed out
> > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > inet:127.0.0.1:33333: read error in initial handshake
> > ...
> > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > unknown[185.36.81.145]
> > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > Connection timed out
> > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > inet:127.0.0.1:33333: read error in initial handshake
> >
> > at which point these seemed to occur with every connect even though
> > 'netstat -lntp' showed the milter listening on port
> >
> > About an hour later, I reverted to the non-milter configuration and
> > things became normal again.
> >
> > Also during the 14 hours that the milter was configured, I saw 4 of these
> >
> > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ... as it
> > caused MailScanner to crash several times
> >
> > I have those 4 messages and have reprocessed them following reversion to
> > the hold queue method with no problem. I also processed them through my
> > test server running the milter without crashing MailScanner. On the test
> > server, I did see
> >
> > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
> > /var/spool/MailScanner/milterout/5ECA5340128, will retry soon...
> >
> > on 3 of the four messages which remained in milterout, but this may have
> > been related to the fact that I submitted all 4 in one manual smtp
> > session and then never submitted any more messages before reverting that
> > to the hold queue method.
> >
> > So, I don't think that the "caused MailScanner to crash" issue was
> > related to the actual message content.
> >
> > My milter config overrides defaults with
> >
> > ---------------------------------
> > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > MTA = msmail
> > MSMail Queue Type = short
> > Milter Scanner = yes
> > Milter Max Children = 1
> > ---------------------------------
> >
> > I wonder if people are successfully using this in production or if
> > people have seen issues such as this?
> >
> > --
> > Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> > San Francisco Bay Area, California    better use your sense - B. Dylan
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner


From iversons at rushville.k12.in.us  Thu Oct 11 11:48:27 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 11 Oct 2018 07:48:27 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
Message-ID: <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>

That message means the mail was queued to mailscanner.  Were both
recepients in the same email?  Were both recipients in the same domain?

On Thu, Oct 11, 2018, 5:43 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> Hello,
>
> I had a few such messages in maillog:
>
> Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997:
> milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter triggers
> DISCARD action; from=<g at example.com> to=<other at example.com> proto=ESMTP
> helo=<g.example.com>
>
> The message was sent to me and one other email address. I got it, but
> other didn't,
> and I don't see anything more in logs, so it seems the message was lost.
> Is is related to this issue?
>
> Regards,
> Nerijus
>
> On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <
> mailscanner at lists.mailscanner.info> wrote:
>
> > Mark,
> >
> > There's a performance fix in this commit that should help with most of
> > this.  The crashing is likely from partially written messages in the
> > milterin queue as a result of not writing the file in a single pass.  I
> > hope to get a few more issues resolved before doing another release.
> >
> >
> https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> >
> >
> >
> > On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net> wrote:
> >
> > > This is basically just a report of things I encountered with the milter
> > > option in MailScanner 5.1.1. I don't think I have enough information to
> > > actually debug these issues, and for now at least, I have reverted to
> > > the Postfix hold queue option.
> > >
> > > I first set up the milter option on a local test server. Mail wasn't
> > > being scanned, but this was because I was submitting the test mail from
> > > localhost. When I submitted mail remotely, all seemed to work well, so
> I
> > > then set up the milter option on my not too busy production server. I
> > > set it up at about 9:30 p.m. on Friday. It seemed to be working well.
> > >
> > > At some point Saturday, I noticed some delays so I began to
> investigate.
> > >
> > > I saw this in mail.log
> > >
> > > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC to
> > > DB2E81180AC8
> > > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > > localhost.localdomain[127.0.0.1]
> > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > Connection timed out
> > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > inet:127.0.0.1:33333: read error in initial handshake
> > >
> > > This seemed to be a one time occurrence. Mail was processed normally
> until
> > >
> > > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F to
> > > A7D441181110
> > > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > > localhost.localdomain[127.0.0.1]
> > > ...
> > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > Connection timed out
> > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > inet:127.0.0.1:33333: read error in initial handshake
> > > ...
> > > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > > unknown[185.36.81.145]
> > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > Connection timed out
> > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > inet:127.0.0.1:33333: read error in initial handshake
> > >
> > > at which point these seemed to occur with every connect even though
> > > 'netstat -lntp' showed the milter listening on port
> > >
> > > About an hour later, I reverted to the non-milter configuration and
> > > things became normal again.
> > >
> > > Also during the 14 hours that the milter was configured, I saw 4 of
> these
> > >
> > > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ... as it
> > > caused MailScanner to crash several times
> > >
> > > I have those 4 messages and have reprocessed them following reversion
> to
> > > the hold queue method with no problem. I also processed them through my
> > > test server running the milter without crashing MailScanner. On the
> test
> > > server, I did see
> > >
> > > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
> > > /var/spool/MailScanner/milterout/5ECA5340128, will retry soon...
> > >
> > > on 3 of the four messages which remained in milterout, but this may
> have
> > > been related to the fact that I submitted all 4 in one manual smtp
> > > session and then never submitted any more messages before reverting
> that
> > > to the hold queue method.
> > >
> > > So, I don't think that the "caused MailScanner to crash" issue was
> > > related to the actual message content.
> > >
> > > My milter config overrides defaults with
> > >
> > > ---------------------------------
> > > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > > MTA = msmail
> > > MSMail Queue Type = short
> > > Milter Scanner = yes
> > > Milter Max Children = 1
> > > ---------------------------------
> > >
> > > I wonder if people are successfully using this in production or if
> > > people have seen issues such as this?
> > >
> > > --
> > > Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> > > San Francisco Bay Area, California    better use your sense - B. Dylan
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181011/690c25e2/attachment.html>

From iversons at rushville.k12.in.us  Thu Oct 11 12:50:31 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 11 Oct 2018 08:50:31 -0400
Subject: esets false positive
In-Reply-To: <Mahogany-0.68.0-19044-20181011-122213.01@nerijus.sat.lt>
References: <Mahogany-0.68.0-19044-20181011-122213.01@nerijus.sat.lt>
Message-ID: <CABu_8zJiDQvXi6GCCF-VCSETQuUVVpoh+BhYt6U7PrKWT=np3Q@mail.gmail.com>

That is most likely the esets wrapper and SweepViruses.pm function failing
to parse the output of the virus scanner properly.

I would start there and run a manual scan based on the parameters in the
wrapper against a file that triggers the problem.  I would then take a look
at the ProcessEsetsOutput function and see if the regex in there make sense
for the output.

On Thu, Oct 11, 2018 at 5:34 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> Hello,
>
> I use latest mailscanner 5.1.1-1 with esets. It works OK, but occasionally
> it "detects" viruses in harmless files. For example:
>
> Oct 11 11:55:18 mail MailScanner[3063]: New Batch: Scanning 1 messages,
> 4623339 bytes
> Oct 11 11:55:19 mail MailScanner[3063]: Virus and Content Scanning:
> Starting
> Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> Oct 11 11:55:25 mail MailScanner[3063]: Virus Scanning: esets found 17
> infections
> Oct 11 11:55:26 mail MailScanner[3063]: Infected message
> 9231B2A14054.A15A2 came from 192.168.x.x
> Oct 11 11:55:26 mail MailScanner[3063]: Virus Scanning: Found 17 viruses
>
> While a real virus output looks like this:
> Oct 11 01:39:44 mail MailScanner[4184]: New Batch: Scanning 1 messages,
> 2104 bytes
> Oct 11 01:39:44 mail MailScanner[4184]: Virus and Content Scanning:
> Starting
> Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: esets found 3
> infections
> Oct 11 01:39:49 mail MailScanner[4184]: Infected message
> EF7F72A14053.A770C came from 5.2.x.x
> Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: Found 3 viruses
>
> How do I debug this?
>
> Regards,
> Nerijus
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181011/7fb05466/attachment.html>

From nerijus at users.sourceforge.net  Thu Oct 11 13:10:21 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Thu, 11 Oct 2018 16:10:21 +0300
Subject: {Disarmed} Re: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net><CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com><Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
 <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>

On Thu, 11 Oct 2018 07:48:27 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> That message means the mail was queued to mailscanner.  Were both
> recepients in the same email?

Yes.

>  Were both recipients in the same domain?

No. I was local, and I got the message, remote recipient did not.

> On Thu, Oct 11, 2018, 5:43 AM Nerijus Baliunas <
> nerijus at users.sourceforge.net> wrote:
> 
> > Hello,
> >
> > I had a few such messages in maillog:
> >
> > Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997:
> > milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter triggers
> > DISCARD action; from=<g at example.com> to=<other at example.com> proto=ESMTP
> > helo=<g.example.com>
> >
> > The message was sent to me and one other email address. I got it, but
> > other didn't,
> > and I don't see anything more in logs, so it seems the message was lost.
> > Is is related to this issue?
> >
> > Regards,
> > Nerijus
> >
> > On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <
> > mailscanner at lists.mailscanner.info> wrote:
> >
> > > Mark,
> > >
> > > There's a performance fix in this commit that should help with most of
> > > this.  The crashing is likely from partially written messages in the
> > > milterin queue as a result of not writing the file in a single pass.  I
> > > hope to get a few more issues resolved before doing another release.
> > >
> > >
> > https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> > >
> > >
> > >
> > > On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net> wrote:
> > >
> > > > This is basically just a report of things I encountered with the milter
> > > > option in MailScanner 5.1.1. I don't think I have enough information to
> > > > actually debug these issues, and for now at least, I have reverted to
> > > > the Postfix hold queue option.
> > > >
> > > > I first set up the milter option on a local test server. Mail wasn't
> > > > being scanned, but this was because I was submitting the test mail from
> > > > localhost. When I submitted mail remotely, all seemed to work well, so
> > I
> > > > then set up the milter option on my not too busy production server. I
> > > > set it up at about 9:30 p.m. on Friday. It seemed to be working well.
> > > >
> > > > At some point Saturday, I noticed some delays so I began to
> > investigate.
> > > >
> > > > I saw this in mail.log
> > > >
> > > > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC to
> > > > DB2E81180AC8
> > > > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > > > localhost.localdomain[127.0.0.1]
> > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > Connection timed out
> > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > inet:127.0.0.1:33333: read error in initial handshake
> > > >
> > > > This seemed to be a one time occurrence. Mail was processed normally
> > until
> > > >
> > > > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F to
> > > > A7D441181110
> > > > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > > > localhost.localdomain[127.0.0.1]
> > > > ...
> > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > Connection timed out
> > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > ...
> > > > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > > > unknown[185.36.81.145]
> > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > Connection timed out
> > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > inet:127.0.0.1:33333: read error in initial handshake
> > > >
> > > > at which point these seemed to occur with every connect even though
> > > > 'netstat -lntp' showed the milter listening on port
> > > >
> > > > About an hour later, I reverted to the non-milter configuration and
> > > > things became normal again.
> > > >
> > > > Also during the 14 hours that the milter was configured, I saw 4 of
> > these
> > > >
> > > > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ... as it
> > > > caused MailScanner to crash several times
> > > >
> > > > I have those 4 messages and have reprocessed them following reversion
> > to
> > > > the hold queue method with no problem. I also processed them through my
> > > > test server running the milter without crashing MailScanner. On the
> > test
> > > > server, I did see
> > > >
> > > > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
> > > > /var/spool/MailScanner/milterout/5ECA5340128, will retry soon...
> > > >
> > > > on 3 of the four messages which remained in milterout, but this may
> > have
> > > > been related to the fact that I submitted all 4 in one manual smtp
> > > > session and then never submitted any more messages before reverting
> > that
> > > > to the hold queue method.
> > > >
> > > > So, I don't think that the "caused MailScanner to crash" issue was
> > > > related to the actual message content.
> > > >
> > > > My milter config overrides defaults with
> > > >
> > > > ---------------------------------
> > > > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > > > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > > > MTA = msmail
> > > > MSMail Queue Type = short
> > > > Milter Scanner = yes
> > > > Milter Max Children = 1
> > > > ---------------------------------
> > > >
> > > > I wonder if people are successfully using this in production or if
> > > > people have seen issues such as this?
> > > >
> > > > --
> > > > Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> > > > San Francisco Bay Area, California    better use your sense - B. Dylan
> > > >
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner


From iversons at rushville.k12.in.us  Thu Oct 11 13:15:10 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 11 Oct 2018 09:15:10 -0400
Subject: {Disarmed} Re: Problems with 5.1.1 milter
In-Reply-To: <Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
 <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>
Message-ID: <CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com>

If the other user was remote, and the origin of the email was remote, then
that problem is between the origin MTA and the remote MTA and not your
MTA.  Your system is not responsible for delivering a copy of an email for
a remote entity.  In fact, this would mean you would be an open relay
forwarding mail for others, which is bad.

On Thu, Oct 11, 2018 at 9:12 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> On Thu, 11 Oct 2018 07:48:27 -0400 Shawn Iverson via MailScanner <
> mailscanner at lists.mailscanner.info> wrote:
>
> > That message means the mail was queued to mailscanner.  Were both
> > recepients in the same email?
>
> Yes.
>
> >  Were both recipients in the same domain?
>
> No. I was local, and I got the message, remote recipient did not.
>
> > On Thu, Oct 11, 2018, 5:43 AM Nerijus Baliunas <
> > nerijus at users.sourceforge.net> wrote:
> >
> > > Hello,
> > >
> > > I had a few such messages in maillog:
> > >
> > > Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997:
> > > milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter triggers
> > > DISCARD action; from=<g at example.com> to=<other at example.com>
> proto=ESMTP
> > > helo=<g.example.com>
> > >
> > > The message was sent to me and one other email address. I got it, but
> > > other didn't,
> > > and I don't see anything more in logs, so it seems the message was
> lost.
> > > Is is related to this issue?
> > >
> > > Regards,
> > > Nerijus
> > >
> > > On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <
> > > mailscanner at lists.mailscanner.info> wrote:
> > >
> > > > Mark,
> > > >
> > > > There's a performance fix in this commit that should help with most
> of
> > > > this.  The crashing is likely from partially written messages in the
> > > > milterin queue as a result of not writing the file in a single
> pass.  I
> > > > hope to get a few more issues resolved before doing another release.
> > > >
> > > >
> > >
> https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> > > >
> > > >
> > > >
> > > > On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net> wrote:
> > > >
> > > > > This is basically just a report of things I encountered with the
> milter
> > > > > option in MailScanner 5.1.1. I don't think I have enough
> information to
> > > > > actually debug these issues, and for now at least, I have reverted
> to
> > > > > the Postfix hold queue option.
> > > > >
> > > > > I first set up the milter option on a local test server. Mail
> wasn't
> > > > > being scanned, but this was because I was submitting the test mail
> from
> > > > > localhost. When I submitted mail remotely, all seemed to work
> well, so
> > > I
> > > > > then set up the milter option on my not too busy production
> server. I
> > > > > set it up at about 9:30 p.m. on Friday. It seemed to be working
> well.
> > > > >
> > > > > At some point Saturday, I noticed some delays so I began to
> > > investigate.
> > > > >
> > > > > I saw this in mail.log
> > > > >
> > > > > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC
> to
> > > > > DB2E81180AC8
> > > > > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > > > > localhost.localdomain[127.0.0.1]
> > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > > Connection timed out
> > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > >
> > > > > This seemed to be a one time occurrence. Mail was processed
> normally
> > > until
> > > > >
> > > > > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F
> to
> > > > > A7D441181110
> > > > > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > > > > localhost.localdomain[127.0.0.1]
> > > > > ...
> > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > > Connection timed out
> > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > ...
> > > > > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > > > > unknown[185.36.81.145]
> > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > > Connection timed out
> > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > >
> > > > > at which point these seemed to occur with every connect even though
> > > > > 'netstat -lntp' showed the milter listening on port
> > > > >
> > > > > About an hour later, I reverted to the non-milter configuration and
> > > > > things became normal again.
> > > > >
> > > > > Also during the 14 hours that the milter was configured, I saw 4 of
> > > these
> > > > >
> > > > > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ...
> as it
> > > > > caused MailScanner to crash several times
> > > > >
> > > > > I have those 4 messages and have reprocessed them following
> reversion
> > > to
> > > > > the hold queue method with no problem. I also processed them
> through my
> > > > > test server running the milter without crashing MailScanner. On the
> > > test
> > > > > server, I did see
> > > > >
> > > > > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
> > > > > /var/spool/MailScanner/milterout/5ECA5340128, will retry soon...
> > > > >
> > > > > on 3 of the four messages which remained in milterout, but this may
> > > have
> > > > > been related to the fact that I submitted all 4 in one manual smtp
> > > > > session and then never submitted any more messages before reverting
> > > that
> > > > > to the hold queue method.
> > > > >
> > > > > So, I don't think that the "caused MailScanner to crash" issue was
> > > > > related to the actual message content.
> > > > >
> > > > > My milter config overrides defaults with
> > > > >
> > > > > ---------------------------------
> > > > > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > > > > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > > > > MTA = msmail
> > > > > MSMail Queue Type = short
> > > > > Milter Scanner = yes
> > > > > Milter Max Children = 1
> > > > > ---------------------------------
> > > > >
> > > > > I wonder if people are successfully using this in production or if
> > > > > people have seen issues such as this?
> > > > >
> > > > > --
> > > > > Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> > > > > San Francisco Bay Area, California    better use your sense - B.
> Dylan
> > > > >
> > > > >
> > > > > --
> > > > > MailScanner mailing list
> > > > > mailscanner at lists.mailscanner.info
> > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181011/40531400/attachment.html>

From nerijus at users.sourceforge.net  Thu Oct 11 13:26:09 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Thu, 11 Oct 2018 16:26:09 +0300
Subject: esets false positive
In-Reply-To: <CABu_8zJiDQvXi6GCCF-VCSETQuUVVpoh+BhYt6U7PrKWT=np3Q@mail.gmail.com>
References: <Mahogany-0.68.0-19044-20181011-122213.01@nerijus.sat.lt>
 <CABu_8zJiDQvXi6GCCF-VCSETQuUVVpoh+BhYt6U7PrKWT=np3Q@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-19044-20181011-162609.00@nerijus.sat.lt>

I don't have file, as I enabled Quarantine Silent Viruses = yes only now.
But the output in the postmaster "Virus Detected" email is:

    Report: Esets: found  in Rusta_Nofo_BabyWipes_REV1_10102018.zip >> ZIP >> __MACOSX 
            Esets Actions:  
            Esets Additional Info: none 
            
            Esets: found  in Rusta_Nofo_BabyWipes_REV1_10102018.zip >> ZIP >> __MACOSX 
            Esets Actions:  
            Esets Additional Info: none 
...

In earlier false positive message:

    Report: Esets: found  in 2018 09 27 UKININKO burokeliu dizainas spaudai 160 x 160 mm.cdr ? ZIP ? color 
            Esets Actions:  
            Esets Additional Info: none 

In real virus message:

    Report: Esets: found Eicar test file in eicar.co3.rar ? RAR ? eicar.co 
            Esets Actions: deleted 
            Esets Additional Info: none 
            
    Report: Esets: found Eicar test file in eicar.co3.rar 
            Esets Actions: deleted 
            Esets Additional Info: none 
            
            Esets: found Eicar test file in eicar.co 
            Esets Actions: cleaned by deleting 
            Esets Additional Info: none 

Regards,
Nerijus

On Thu, 11 Oct 2018 08:50:31 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> That is most likely the esets wrapper and SweepViruses.pm function failing
> to parse the output of the virus scanner properly.
> 
> I would start there and run a manual scan based on the parameters in the
> wrapper against a file that triggers the problem.  I would then take a look
> at the ProcessEsetsOutput function and see if the regex in there make sense
> for the output.
> 
> On Thu, Oct 11, 2018 at 5:34 AM Nerijus Baliunas <
> nerijus at users.sourceforge.net> wrote:
> 
> > Hello,
> >
> > I use latest mailscanner 5.1.1-1 with esets. It works OK, but occasionally
> > it "detects" viruses in harmless files. For example:
> >
> > Oct 11 11:55:18 mail MailScanner[3063]: New Batch: Scanning 1 messages,
> > 4623339 bytes
> > Oct 11 11:55:19 mail MailScanner[3063]: Virus and Content Scanning:
> > Starting
> > Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Virus Scanning: esets found 17
> > infections
> > Oct 11 11:55:26 mail MailScanner[3063]: Infected message
> > 9231B2A14054.A15A2 came from 192.168.x.x
> > Oct 11 11:55:26 mail MailScanner[3063]: Virus Scanning: Found 17 viruses
> >
> > While a real virus output looks like this:
> > Oct 11 01:39:44 mail MailScanner[4184]: New Batch: Scanning 1 messages,
> > 2104 bytes
> > Oct 11 01:39:44 mail MailScanner[4184]: Virus and Content Scanning:
> > Starting
> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> > Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: esets found 3
> > infections
> > Oct 11 01:39:49 mail MailScanner[4184]: Infected message
> > EF7F72A14053.A770C came from 5.2.x.x
> > Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: Found 3 viruses
> >
> > How do I debug this?
> >
> > Regards,
> > Nerijus
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner


From nerijus at users.sourceforge.net  Fri Oct 12 06:40:49 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Fri, 12 Oct 2018 09:40:49 +0300
Subject: {Disarmed} Re: {Disarmed} Re: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net><CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com><Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt><CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com><Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>
 <CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-19044-20181012-094049.00@nerijus.sat.lt>

The origin was local. I see a copy delivered to me in the maillog, but I don't
see any delivery to the remote recipient.

On Thu, 11 Oct 2018 09:15:10 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> If the other user was remote, and the origin of the email was remote, then
> that problem is between the origin MTA and the remote MTA and not your
> MTA.  Your system is not responsible for delivering a copy of an email for
> a remote entity.  In fact, this would mean you would be an open relay
> forwarding mail for others, which is bad.
> 
> On Thu, Oct 11, 2018 at 9:12 AM Nerijus Baliunas <
> nerijus at users.sourceforge.net> wrote:
> 
> > On Thu, 11 Oct 2018 07:48:27 -0400 Shawn Iverson via MailScanner <
> > mailscanner at lists.mailscanner.info> wrote:
> >
> > > That message means the mail was queued to mailscanner.  Were both
> > > recepients in the same email?
> >
> > Yes.
> >
> > >  Were both recipients in the same domain?
> >
> > No. I was local, and I got the message, remote recipient did not.
> >
> > > On Thu, Oct 11, 2018, 5:43 AM Nerijus Baliunas <
> > > nerijus at users.sourceforge.net> wrote:
> > >
> > > > Hello,
> > > >
> > > > I had a few such messages in maillog:
> > > >
> > > > Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997:
> > > > milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter triggers
> > > > DISCARD action; from=<g at example.com> to=<other at example.com>
> > proto=ESMTP
> > > > helo=<g.example.com>
> > > >
> > > > The message was sent to me and one other email address. I got it, but
> > > > other didn't,
> > > > and I don't see anything more in logs, so it seems the message was
> > lost.
> > > > Is is related to this issue?
> > > >
> > > > Regards,
> > > > Nerijus
> > > >
> > > > On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <
> > > > mailscanner at lists.mailscanner.info> wrote:
> > > >
> > > > > Mark,
> > > > >
> > > > > There's a performance fix in this commit that should help with most
> > of
> > > > > this.  The crashing is likely from partially written messages in the
> > > > > milterin queue as a result of not writing the file in a single
> > pass.  I
> > > > > hope to get a few more issues resolved before doing another release.
> > > > >
> > > > >
> > > >
> > https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> > > > >
> > > > >
> > > > >
> > > > > On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net> wrote:
> > > > >
> > > > > > This is basically just a report of things I encountered with the
> > milter
> > > > > > option in MailScanner 5.1.1. I don't think I have enough
> > information to
> > > > > > actually debug these issues, and for now at least, I have reverted
> > to
> > > > > > the Postfix hold queue option.
> > > > > >
> > > > > > I first set up the milter option on a local test server. Mail
> > wasn't
> > > > > > being scanned, but this was because I was submitting the test mail
> > from
> > > > > > localhost. When I submitted mail remotely, all seemed to work
> > well, so
> > > > I
> > > > > > then set up the milter option on my not too busy production
> > server. I
> > > > > > set it up at about 9:30 p.m. on Friday. It seemed to be working
> > well.
> > > > > >
> > > > > > At some point Saturday, I noticed some delays so I began to
> > > > investigate.
> > > > > >
> > > > > > I saw this in mail.log
> > > > > >
> > > > > > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue: 2BA30E13AF.AAFEC
> > to
> > > > > > DB2E81180AC8
> > > > > > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > > > > > localhost.localdomain[127.0.0.1]
> > > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > > > Connection timed out
> > > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > >
> > > > > > This seemed to be a one time occurrence. Mail was processed
> > normally
> > > > until
> > > > > >
> > > > > > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue: B679E47A37.A9D7F
> > to
> > > > > > A7D441181110
> > > > > > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > > > > > localhost.localdomain[127.0.0.1]
> > > > > > ...
> > > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > > > Connection timed out
> > > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > ...
> > > > > > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > > > > > unknown[185.36.81.145]
> > > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet header:
> > > > > > Connection timed out
> > > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > >
> > > > > > at which point these seemed to occur with every connect even though
> > > > > > 'netstat -lntp' showed the milter listening on port
> > > > > >
> > > > > > About an hour later, I reverted to the non-milter configuration and
> > > > > > things became normal again.
> > > > > >
> > > > > > Also during the 14 hours that the milter was configured, I saw 4 of
> > > > these
> > > > > >
> > > > > > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message ...
> > as it
> > > > > > caused MailScanner to crash several times
> > > > > >
> > > > > > I have those 4 messages and have reprocessed them following
> > reversion
> > > > to
> > > > > > the hold queue method with no problem. I also processed them
> > through my
> > > > > > test server running the milter without crashing MailScanner. On the
> > > > test
> > > > > > server, I did see
> > > > > >
> > > > > > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick message
> > > > > > /var/spool/MailScanner/milterout/5ECA5340128, will retry soon...
> > > > > >
> > > > > > on 3 of the four messages which remained in milterout, but this may
> > > > have
> > > > > > been related to the fact that I submitted all 4 in one manual smtp
> > > > > > session and then never submitted any more messages before reverting
> > > > that
> > > > > > to the hold queue method.
> > > > > >
> > > > > > So, I don't think that the "caused MailScanner to crash" issue was
> > > > > > related to the actual message content.
> > > > > >
> > > > > > My milter config overrides defaults with
> > > > > >
> > > > > > ---------------------------------
> > > > > > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > > > > > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > > > > > MTA = msmail
> > > > > > MSMail Queue Type = short
> > > > > > Milter Scanner = yes
> > > > > > Milter Max Children = 1
> > > > > > ---------------------------------
> > > > > >
> > > > > > I wonder if people are successfully using this in production or if
> > > > > > people have seen issues such as this?
> > > > > >
> > > > > > --
> > > > > > Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> > > > > > San Francisco Bay Area, California    better use your sense - B.
> > Dylan
> > > > > >
> > > > > >
> > > > > > --
> > > > > > MailScanner mailing list
> > > > > > mailscanner at lists.mailscanner.info
> > > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > >
> > > >
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner


From iversons at rushville.k12.in.us  Fri Oct 12 11:40:40 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 12 Oct 2018 07:40:40 -0400
Subject: {Disarmed} Re: {Disarmed} Re: Problems with 5.1.1 milter
In-Reply-To: <Mahogany-0.68.0-19044-20181012-094049.00@nerijus.sat.lt>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
 <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>
 <CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181012-094049.00@nerijus.sat.lt>
Message-ID: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>

Ok.  I'll run some tests and see what happens.  Were both recipients in the
To: field?

On Fri, Oct 12, 2018 at 2:42 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> The origin was local. I see a copy delivered to me in the maillog, but I
> don't
> see any delivery to the remote recipient.
>
> On Thu, 11 Oct 2018 09:15:10 -0400 Shawn Iverson via MailScanner <
> mailscanner at lists.mailscanner.info> wrote:
>
> > If the other user was remote, and the origin of the email was remote,
> then
> > that problem is between the origin MTA and the remote MTA and not your
> > MTA.  Your system is not responsible for delivering a copy of an email
> for
> > a remote entity.  In fact, this would mean you would be an open relay
> > forwarding mail for others, which is bad.
> >
> > On Thu, Oct 11, 2018 at 9:12 AM Nerijus Baliunas <
> > nerijus at users.sourceforge.net> wrote:
> >
> > > On Thu, 11 Oct 2018 07:48:27 -0400 Shawn Iverson via MailScanner <
> > > mailscanner at lists.mailscanner.info> wrote:
> > >
> > > > That message means the mail was queued to mailscanner.  Were both
> > > > recepients in the same email?
> > >
> > > Yes.
> > >
> > > >  Were both recipients in the same domain?
> > >
> > > No. I was local, and I got the message, remote recipient did not.
> > >
> > > > On Thu, Oct 11, 2018, 5:43 AM Nerijus Baliunas <
> > > > nerijus at users.sourceforge.net> wrote:
> > > >
> > > > > Hello,
> > > > >
> > > > > I had a few such messages in maillog:
> > > > >
> > > > > Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997:
> > > > > milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter
> triggers
> > > > > DISCARD action; from=<g at example.com> to=<other at example.com>
> > > proto=ESMTP
> > > > > helo=<g.example.com>
> > > > >
> > > > > The message was sent to me and one other email address. I got it,
> but
> > > > > other didn't,
> > > > > and I don't see anything more in logs, so it seems the message was
> > > lost.
> > > > > Is is related to this issue?
> > > > >
> > > > > Regards,
> > > > > Nerijus
> > > > >
> > > > > On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <
> > > > > mailscanner at lists.mailscanner.info> wrote:
> > > > >
> > > > > > Mark,
> > > > > >
> > > > > > There's a performance fix in this commit that should help with
> most
> > > of
> > > > > > this.  The crashing is likely from partially written messages in
> the
> > > > > > milterin queue as a result of not writing the file in a single
> > > pass.  I
> > > > > > hope to get a few more issues resolved before doing another
> release.
> > > > > >
> > > > > >
> > > > >
> > >
> https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> > > > > >
> > > > > >
> > > > > >
> > > > > > On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net>
> wrote:
> > > > > >
> > > > > > > This is basically just a report of things I encountered with
> the
> > > milter
> > > > > > > option in MailScanner 5.1.1. I don't think I have enough
> > > information to
> > > > > > > actually debug these issues, and for now at least, I have
> reverted
> > > to
> > > > > > > the Postfix hold queue option.
> > > > > > >
> > > > > > > I first set up the milter option on a local test server. Mail
> > > wasn't
> > > > > > > being scanned, but this was because I was submitting the test
> mail
> > > from
> > > > > > > localhost. When I submitted mail remotely, all seemed to work
> > > well, so
> > > > > I
> > > > > > > then set up the milter option on my not too busy production
> > > server. I
> > > > > > > set it up at about 9:30 p.m. on Friday. It seemed to be working
> > > well.
> > > > > > >
> > > > > > > At some point Saturday, I noticed some delays so I began to
> > > > > investigate.
> > > > > > >
> > > > > > > I saw this in mail.log
> > > > > > >
> > > > > > > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue:
> 2BA30E13AF.AAFEC
> > > to
> > > > > > > DB2E81180AC8
> > > > > > > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > > > > > > localhost.localdomain[127.0.0.1]
> > > > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet
> header:
> > > > > > > Connection timed out
> > > > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > >
> > > > > > > This seemed to be a one time occurrence. Mail was processed
> > > normally
> > > > > until
> > > > > > >
> > > > > > > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue:
> B679E47A37.A9D7F
> > > to
> > > > > > > A7D441181110
> > > > > > > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > > > > > > localhost.localdomain[127.0.0.1]
> > > > > > > ...
> > > > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet
> header:
> > > > > > > Connection timed out
> > > > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > > ...
> > > > > > > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > > > > > > unknown[185.36.81.145]
> > > > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet
> header:
> > > > > > > Connection timed out
> > > > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > >
> > > > > > > at which point these seemed to occur with every connect even
> though
> > > > > > > 'netstat -lntp' showed the milter listening on port
> > > > > > >
> > > > > > > About an hour later, I reverted to the non-milter
> configuration and
> > > > > > > things became normal again.
> > > > > > >
> > > > > > > Also during the 14 hours that the milter was configured, I saw
> 4 of
> > > > > these
> > > > > > >
> > > > > > > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message
> ...
> > > as it
> > > > > > > caused MailScanner to crash several times
> > > > > > >
> > > > > > > I have those 4 messages and have reprocessed them following
> > > reversion
> > > > > to
> > > > > > > the hold queue method with no problem. I also processed them
> > > through my
> > > > > > > test server running the milter without crashing MailScanner.
> On the
> > > > > test
> > > > > > > server, I did see
> > > > > > >
> > > > > > > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick
> message
> > > > > > > /var/spool/MailScanner/milterout/5ECA5340128, will retry
> soon...
> > > > > > >
> > > > > > > on 3 of the four messages which remained in milterout, but
> this may
> > > > > have
> > > > > > > been related to the fact that I submitted all 4 in one manual
> smtp
> > > > > > > session and then never submitted any more messages before
> reverting
> > > > > that
> > > > > > > to the hold queue method.
> > > > > > >
> > > > > > > So, I don't think that the "caused MailScanner to crash" issue
> was
> > > > > > > related to the actual message content.
> > > > > > >
> > > > > > > My milter config overrides defaults with
> > > > > > >
> > > > > > > ---------------------------------
> > > > > > > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > > > > > > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > > > > > > MTA = msmail
> > > > > > > MSMail Queue Type = short
> > > > > > > Milter Scanner = yes
> > > > > > > Milter Max Children = 1
> > > > > > > ---------------------------------
> > > > > > >
> > > > > > > I wonder if people are successfully using this in production
> or if
> > > > > > > people have seen issues such as this?
> > > > > > >
> > > > > > > --
> > > > > > > Mark Sapiro <mark at msapiro.net>        The highway is for
> gamblers,
> > > > > > > San Francisco Bay Area, California    better use your sense -
> B.
> > > Dylan
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > MailScanner mailing list
> > > > > > > mailscanner at lists.mailscanner.info
> > > > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > MailScanner mailing list
> > > > > mailscanner at lists.mailscanner.info
> > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181012/5bb1fd31/attachment.html>

From nerijus at users.sourceforge.net  Fri Oct 12 12:14:46 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Fri, 12 Oct 2018 15:14:46 +0300
Subject: {Disarmed} Re: {Disarmed} Re: {Disarmed} Re: Problems with 5.1.1
 milter
In-Reply-To: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net><CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com><Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt><CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com><Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt><CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com><Mahogany-0.68.0-19044-20181012-094049.00@nerijus.sat.lt>
 <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-19044-20181012-151446.00@nerijus.sat.lt>

External recipient was in To, internal (me) was in Cc (1st case) and Bcc (2nd case).

On Fri, 12 Oct 2018 07:40:40 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> Ok.  I'll run some tests and see what happens.  Were both recipients in the
> To: field?
> 
> On Fri, Oct 12, 2018 at 2:42 AM Nerijus Baliunas <
> nerijus at users.sourceforge.net> wrote:
> 
> > The origin was local. I see a copy delivered to me in the maillog, but I
> > don't
> > see any delivery to the remote recipient.
> >
> > On Thu, 11 Oct 2018 09:15:10 -0400 Shawn Iverson via MailScanner <
> > mailscanner at lists.mailscanner.info> wrote:
> >
> > > If the other user was remote, and the origin of the email was remote,
> > then
> > > that problem is between the origin MTA and the remote MTA and not your
> > > MTA.  Your system is not responsible for delivering a copy of an email
> > for
> > > a remote entity.  In fact, this would mean you would be an open relay
> > > forwarding mail for others, which is bad.
> > >
> > > On Thu, Oct 11, 2018 at 9:12 AM Nerijus Baliunas <
> > > nerijus at users.sourceforge.net> wrote:
> > >
> > > > On Thu, 11 Oct 2018 07:48:27 -0400 Shawn Iverson via MailScanner <
> > > > mailscanner at lists.mailscanner.info> wrote:
> > > >
> > > > > That message means the mail was queued to mailscanner.  Were both
> > > > > recepients in the same email?
> > > >
> > > > Yes.
> > > >
> > > > >  Were both recipients in the same domain?
> > > >
> > > > No. I was local, and I got the message, remote recipient did not.
> > > >
> > > > > On Thu, Oct 11, 2018, 5:43 AM Nerijus Baliunas <
> > > > > nerijus at users.sourceforge.net> wrote:
> > > > >
> > > > > > Hello,
> > > > > >
> > > > > > I had a few such messages in maillog:
> > > > > >
> > > > > > Oct 10 11:06:20 bluegene postfix/cleanup[2519]: 8AED1181849997:
> > > > > > milter-discard: END-OF-MESSAGE from ip3 [192.168.0.3]: milter
> > triggers
> > > > > > DISCARD action; from=<g at example.com> to=<other at example.com>
> > > > proto=ESMTP
> > > > > > helo=<g.example.com>
> > > > > >
> > > > > > The message was sent to me and one other email address. I got it,
> > but
> > > > > > other didn't,
> > > > > > and I don't see anything more in logs, so it seems the message was
> > > > lost.
> > > > > > Is is related to this issue?
> > > > > >
> > > > > > Regards,
> > > > > > Nerijus
> > > > > >
> > > > > > On Sun, 7 Oct 2018 15:36:02 -0400 Shawn Iverson via MailScanner <
> > > > > > mailscanner at lists.mailscanner.info> wrote:
> > > > > >
> > > > > > > Mark,
> > > > > > >
> > > > > > > There's a performance fix in this commit that should help with
> > most
> > > > of
> > > > > > > this.  The crashing is likely from partially written messages in
> > the
> > > > > > > milterin queue as a result of not writing the file in a single
> > > > pass.  I
> > > > > > > hope to get a few more issues resolved before doing another
> > release.
> > > > > > >
> > > > > > >
> > > > > >
> > > >
> > https://github.com/MailScanner/v5/commit/5083b4e0f0eecbec84a5ab94538b0ffbe35f90f1
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > On Sun, Oct 7, 2018 at 2:17 PM Mark Sapiro <mark at msapiro.net>
> > wrote:
> > > > > > >
> > > > > > > > This is basically just a report of things I encountered with
> > the
> > > > milter
> > > > > > > > option in MailScanner 5.1.1. I don't think I have enough
> > > > information to
> > > > > > > > actually debug these issues, and for now at least, I have
> > reverted
> > > > to
> > > > > > > > the Postfix hold queue option.
> > > > > > > >
> > > > > > > > I first set up the milter option on a local test server. Mail
> > > > wasn't
> > > > > > > > being scanned, but this was because I was submitting the test
> > mail
> > > > from
> > > > > > > > localhost. When I submitted mail remotely, all seemed to work
> > > > well, so
> > > > > > I
> > > > > > > > then set up the milter option on my not too busy production
> > > > server. I
> > > > > > > > set it up at about 9:30 p.m. on Friday. It seemed to be working
> > > > well.
> > > > > > > >
> > > > > > > > At some point Saturday, I noticed some delays so I began to
> > > > > > investigate.
> > > > > > > >
> > > > > > > > I saw this in mail.log
> > > > > > > >
> > > > > > > > Oct  6 08:35:50 sbh16 MailScanner[3301]: Requeue:
> > 2BA30E13AF.AAFEC
> > > > to
> > > > > > > > DB2E81180AC8
> > > > > > > > Oct  6 08:35:50 sbh16 postfix/smtpd[6686]: connect from
> > > > > > > > localhost.localdomain[127.0.0.1]
> > > > > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet
> > header:
> > > > > > > > Connection timed out
> > > > > > > > Oct  6 08:36:20 sbh16 postfix/smtpd[6686]: warning: milter
> > > > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > > >
> > > > > > > > This seemed to be a one time occurrence. Mail was processed
> > > > normally
> > > > > > until
> > > > > > > >
> > > > > > > > Oct  6 11:16:39 sbh16 MailScanner[7312]: Requeue:
> > B679E47A37.A9D7F
> > > > to
> > > > > > > > A7D441181110
> > > > > > > > Oct  6 11:16:39 sbh16 postfix/smtpd[27861]: connect from
> > > > > > > > localhost.localdomain[127.0.0.1]
> > > > > > > > ...
> > > > > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet
> > header:
> > > > > > > > Connection timed out
> > > > > > > > Oct  6 11:17:09 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > > > ...
> > > > > > > > Oct  6 11:17:10 sbh16 postfix/smtpd[27861]: connect from
> > > > > > > > unknown[185.36.81.145]
> > > > > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > > inet:127.0.0.1:33333: can't read SMFIC_OPTNEG reply packet
> > header:
> > > > > > > > Connection timed out
> > > > > > > > Oct  6 11:17:40 sbh16 postfix/smtpd[27861]: warning: milter
> > > > > > > > inet:127.0.0.1:33333: read error in initial handshake
> > > > > > > >
> > > > > > > > at which point these seemed to occur with every connect even
> > though
> > > > > > > > 'netstat -lntp' showed the milter listening on port
> > > > > > > >
> > > > > > > > About an hour later, I reverted to the non-milter
> > configuration and
> > > > > > > > things became normal again.
> > > > > > > >
> > > > > > > > Also during the 14 hours that the milter was configured, I saw
> > 4 of
> > > > > > these
> > > > > > > >
> > > > > > > > Oct  5 22:58:44 sbh16 MailScanner[7746]: Quarantined message
> > ...
> > > > as it
> > > > > > > > caused MailScanner to crash several times
> > > > > > > >
> > > > > > > > I have those 4 messages and have reprocessed them following
> > > > reversion
> > > > > > to
> > > > > > > > the hold queue method with no problem. I also processed them
> > > > through my
> > > > > > > > test server running the milter without crashing MailScanner.
> > On the
> > > > > > test
> > > > > > > > server, I did see
> > > > > > > >
> > > > > > > > Oct  6 15:21:39 msapiro MailScanner[13351]: Unable to kick
> > message
> > > > > > > > /var/spool/MailScanner/milterout/5ECA5340128, will retry
> > soon...
> > > > > > > >
> > > > > > > > on 3 of the four messages which remained in milterout, but
> > this may
> > > > > > have
> > > > > > > > been related to the fact that I submitted all 4 in one manual
> > smtp
> > > > > > > > session and then never submitted any more messages before
> > reverting
> > > > > > that
> > > > > > > > to the hold queue method.
> > > > > > > >
> > > > > > > > So, I don't think that the "caused MailScanner to crash" issue
> > was
> > > > > > > > related to the actual message content.
> > > > > > > >
> > > > > > > > My milter config overrides defaults with
> > > > > > > >
> > > > > > > > ---------------------------------
> > > > > > > > Incoming Queue Dir = /var/spool/MailScanner/milterin
> > > > > > > > Outgoing Queue Dir = /var/spool/MailScanner/milterout
> > > > > > > > MTA = msmail
> > > > > > > > MSMail Queue Type = short
> > > > > > > > Milter Scanner = yes
> > > > > > > > Milter Max Children = 1
> > > > > > > > ---------------------------------
> > > > > > > >
> > > > > > > > I wonder if people are successfully using this in production
> > or if
> > > > > > > > people have seen issues such as this?
> > > > > > > >
> > > > > > > > --
> > > > > > > > Mark Sapiro <mark at msapiro.net>        The highway is for
> > gamblers,
> > > > > > > > San Francisco Bay Area, California    better use your sense -
> > B.
> > > > Dylan
> > > > > > > >
> > > > > > > >
> > > > > > > > --
> > > > > > > > MailScanner mailing list
> > > > > > > > mailscanner at lists.mailscanner.info
> > > > > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > > > >
> > > > > >
> > > > > >
> > > > > > --
> > > > > > MailScanner mailing list
> > > > > > mailscanner at lists.mailscanner.info
> > > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > > >
> > > >
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner


From nerijus at users.sourceforge.net  Fri Oct 12 12:31:43 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Fri, 12 Oct 2018 15:31:43 +0300
Subject: esets false positive
In-Reply-To: <CABu_8zJiDQvXi6GCCF-VCSETQuUVVpoh+BhYt6U7PrKWT=np3Q@mail.gmail.com>
References: <Mahogany-0.68.0-19044-20181011-122213.01@nerijus.sat.lt>
 <CABu_8zJiDQvXi6GCCF-VCSETQuUVVpoh+BhYt6U7PrKWT=np3Q@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-19044-20181012-153143.01@nerijus.sat.lt>

I got the file. Here is the output of a virus:

# /opt/eset/esets/sbin/esets_scan .
...
name="./eicar", threat="Eicar test file", action="cleaned by deleting", info=""
...
# echo $?
1

Output of false positive:

# /opt/eset/esets/sbin/esets_scan .
...
name="./test.zip", threat="", action="", info="archive damaged"
name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._DIN-Black.zip", threat="", action="", info="archive damaged"
name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._DIN-Black.zip ? ZIP ? ", threat="", action="", info="archive damaged"
name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._Sanchez Light .zip", threat="", action="", info="archive damaged"
name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._Sanchez Light .zip ? ZIP ? ", threat="", action="", info="archive damaged"
...
# echo $?
10

Archives are OK, I can view/extract them, so it is most probably a bug in esets scanner itself.
Empty threat (threat="") with info="archive damaged" should probably be allowed.

On Thu, 11 Oct 2018 08:50:31 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> That is most likely the esets wrapper and SweepViruses.pm function failing
> to parse the output of the virus scanner properly.
> 
> I would start there and run a manual scan based on the parameters in the
> wrapper against a file that triggers the problem.  I would then take a look
> at the ProcessEsetsOutput function and see if the regex in there make sense
> for the output.
> 
> On Thu, Oct 11, 2018 at 5:34 AM Nerijus Baliunas <
> nerijus at users.sourceforge.net> wrote:
> 
> > Hello,
> >
> > I use latest mailscanner 5.1.1-1 with esets. It works OK, but occasionally
> > it "detects" viruses in harmless files. For example:
> >
> > Oct 11 11:55:18 mail MailScanner[3063]: New Batch: Scanning 1 messages,
> > 4623339 bytes
> > Oct 11 11:55:19 mail MailScanner[3063]: Virus and Content Scanning:
> > Starting
> > Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
> > Oct 11 11:55:25 mail MailScanner[3063]: Virus Scanning: esets found 17
> > infections
> > Oct 11 11:55:26 mail MailScanner[3063]: Infected message
> > 9231B2A14054.A15A2 came from 192.168.x.x
> > Oct 11 11:55:26 mail MailScanner[3063]: Virus Scanning: Found 17 viruses
> >
> > While a real virus output looks like this:
> > Oct 11 01:39:44 mail MailScanner[4184]: New Batch: Scanning 1 messages,
> > 2104 bytes
> > Oct 11 01:39:44 mail MailScanner[4184]: Virus and Content Scanning:
> > Starting
> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
> > Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: esets found 3
> > infections
> > Oct 11 01:39:49 mail MailScanner[4184]: Infected message
> > EF7F72A14053.A770C came from 5.2.x.x
> > Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: Found 3 viruses
> >
> > How do I debug this?
> >
> > Regards,
> > Nerijus


From jim at shout.net  Fri Oct 12 13:26:32 2018
From: jim at shout.net (Jim Creason)
Date: Fri, 12 Oct 2018 08:26:32 -0500
Subject: esets false positive
In-Reply-To: <Mahogany-0.68.0-19044-20181012-153143.01@nerijus.sat.lt>
References: <Mahogany-0.68.0-19044-20181011-122213.01@nerijus.sat.lt>
 <CABu_8zJiDQvXi6GCCF-VCSETQuUVVpoh+BhYt6U7PrKWT=np3Q@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181012-153143.01@nerijus.sat.lt>
Message-ID: <3c222a20de98d88b30fd66dd3e977337@shout.net>



Looking at your file names, and based on past experience, I would bet it 
is a bug in esets and how it scans Mac Postscript fonts, even inside an 
archive.  When I used to do IT support for an all-Mac Illustration 
company, e-mailing fonts was always problematic.  Had to use SFTP, and 
even then there were still issues unless the font folders were archived 
first.  Convincing artists that you couldn't e-mail fonts was another 
matter...

        --jim


On 2018-10-12 7:31 am, Nerijus Baliunas wrote:
> I got the file. Here is the output of a virus:
> 
> # /opt/eset/esets/sbin/esets_scan .
> ...
> name="./eicar", threat="Eicar test file", action="cleaned by deleting", 
> info=""
> ...
> # echo $?
> 1
> 
> Output of false positive:
> 
> # /opt/eset/esets/sbin/esets_scan .
> ...
> name="./test.zip", threat="", action="", info="archive damaged"
> name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._DIN-Black.zip",
> threat="", action="", info="archive damaged"
> name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._DIN-Black.zip ? ZIP ?
> ", threat="", action="", info="archive damaged"
> name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._Sanchez Light .zip",
> threat="", action="", info="archive damaged"
> name="./test.zip ? ZIP ? __MACOSX/R/Typefaces/._Sanchez Light .zip ?
> ZIP ? ", threat="", action="", info="archive damaged"
> ...
> # echo $?
> 10
> 
> Archives are OK, I can view/extract them, so it is most probably a bug
> in esets scanner itself.
> Empty threat (threat="") with info="archive damaged" should probably be 
> allowed.
> 
> On Thu, 11 Oct 2018 08:50:31 -0400 Shawn Iverson via MailScanner
> <mailscanner at lists.mailscanner.info> wrote:
> 
>> That is most likely the esets wrapper and SweepViruses.pm function 
>> failing
>> to parse the output of the virus scanner properly.
>> 
>> I would start there and run a manual scan based on the parameters in 
>> the
>> wrapper against a file that triggers the problem.  I would then take a 
>> look
>> at the ProcessEsetsOutput function and see if the regex in there make 
>> sense
>> for the output.
>> 
>> On Thu, Oct 11, 2018 at 5:34 AM Nerijus Baliunas <
>> nerijus at users.sourceforge.net> wrote:
>> 
>> > Hello,
>> >
>> > I use latest mailscanner 5.1.1-1 with esets. It works OK, but occasionally
>> > it "detects" viruses in harmless files. For example:
>> >
>> > Oct 11 11:55:18 mail MailScanner[3063]: New Batch: Scanning 1 messages,
>> > 4623339 bytes
>> > Oct 11 11:55:19 mail MailScanner[3063]: Virus and Content Scanning:
>> > Starting
>> > Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:24 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Esets::INFECTED::
>> > Oct 11 11:55:25 mail MailScanner[3063]: Virus Scanning: esets found 17
>> > infections
>> > Oct 11 11:55:26 mail MailScanner[3063]: Infected message
>> > 9231B2A14054.A15A2 came from 192.168.x.x
>> > Oct 11 11:55:26 mail MailScanner[3063]: Virus Scanning: Found 17 viruses
>> >
>> > While a real virus output looks like this:
>> > Oct 11 01:39:44 mail MailScanner[4184]: New Batch: Scanning 1 messages,
>> > 2104 bytes
>> > Oct 11 01:39:44 mail MailScanner[4184]: Virus and Content Scanning:
>> > Starting
>> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
>> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
>> > Oct 11 01:39:49 mail MailScanner[4184]: Esets::INFECTED::Eicar test file
>> > Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: esets found 3
>> > infections
>> > Oct 11 01:39:49 mail MailScanner[4184]: Infected message
>> > EF7F72A14053.A770C came from 5.2.x.x
>> > Oct 11 01:39:49 mail MailScanner[4184]: Virus Scanning: Found 3 viruses
>> >
>> > How do I debug this?
>> >
>> > Regards,
>> > Nerijus

From mark at msapiro.net  Fri Oct 12 17:46:50 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 12 Oct 2018 10:46:50 -0700
Subject: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
 <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>
 <CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181012-094049.00@nerijus.sat.lt>
 <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
Message-ID: <4105d8d9-6084-0698-4140-4b02f1385009@msapiro.net>

On 10/12/2018 04:40 AM, Shawn Iverson via MailScanner wrote:
> Ok.? I'll run some tests and see what happens.? Were both recipients in
> the To: field?


Actually, if things are working correctly, recipients in To: and/or Cc:
are irrelevant. It is the envelope recipients that determine to whom the
mail is sent. These are the 'O' or 'R' entries in the Postfix queue file.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From iversons at rushville.k12.in.us  Fri Oct 12 17:49:44 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 12 Oct 2018 13:49:44 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <4105d8d9-6084-0698-4140-4b02f1385009@msapiro.net>
References: <948be9ca-ce04-032a-5968-50d77735029f@msapiro.net>
 <CABu_8zK76-TLeF6x9pC8eD+t3rknoGwGJf_VNhbKvMDKu3NubA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-124304.01@nerijus.sat.lt>
 <CABu_8zJ8J+DTn_eRfeuvunEvWyePmhAy7UrS+cNXo3-f1LPGcw@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181011-161021.01@nerijus.sat.lt>
 <CABu_8zKYwqkKwmhzcnX5X4uHC9xoJjY0pogpcuZw_ve=rnNehA@mail.gmail.com>
 <Mahogany-0.68.0-19044-20181012-094049.00@nerijus.sat.lt>
 <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
 <4105d8d9-6084-0698-4140-4b02f1385009@msapiro.net>
Message-ID: <CABu_8zLDkEQs+tyFcV-DfLkvTqgcx-XFtU=mmosxxKgi8OBDrQ@mail.gmail.com>

Mark,

Agreed.  Definitely some bugs to iron out with the milter.  I have found a
couple already.  Hence why it is currently in an experimental status.

On Fri, Oct 12, 2018 at 1:47 PM Mark Sapiro <mark at msapiro.net> wrote:

> On 10/12/2018 04:40 AM, Shawn Iverson via MailScanner wrote:
> > Ok.  I'll run some tests and see what happens.  Were both recipients in
> > the To: field?
>
>
> Actually, if things are working correctly, recipients in To: and/or Cc:
> are irrelevant. It is the envelope recipients that determine to whom the
> mail is sent. These are the 'O' or 'R' entries in the Postfix queue file.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181012/11627697/attachment.html>

From mark at msapiro.net  Sat Oct 13 01:47:33 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 12 Oct 2018 18:47:33 -0700
Subject: Problems with 5.1.1 milter
In-Reply-To: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
References: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
Message-ID: <0f60ebcc-5a3c-f3f7-2d56-f0bd458d3dcd@msapiro.net>

On Fri, 12 Oct 2018 07:40:40 -0400 Shawn Iverson via MailScanner
<mailscanner at lists.mailscanner.info> wrote:

> Ok.  I'll run some tests and see what happens.  Were both recipients in the
> To: field?

I have run a simple test with a message with one local and one remote
recipient.

I get this in the log:

> Oct 12 18:16:23 msapiro postfix/smtpd[26916]: connect from msapiro-enet.attlocal.net[10.211.115.100]
> Oct 12 18:16:23 msapiro postfix/smtpd[26916]: 7002C340121: client=msapiro-enet.attlocal.net[10.211.115.100]
> Oct 12 18:16:23 msapiro postfix/cleanup[26921]: 7002C340121: message-id=<20181013011623.7002C340121 at msapiro.net>
> Oct 12 18:16:23 msapiro postfix/cleanup[26921]: 7002C340121: milter-discard: END-OF-MESSAGE from msapiro-enet.attlocal.net[10.211.115.100]: milter triggers DISCARD action; from=<mark at msapiro.net> to=<mark at ms2.msapiro.net> proto=SMTP helo=<msapiro.net>
> Oct 12 18:16:23 msapiro postfix/smtpd[26916]: disconnect from msapiro-enet.attlocal.net[10.211.115.100] helo=1 mail=1 rcpt=2 data=1 quit=1 commands=6
> Oct 12 18:16:28 msapiro MailScanner[2489]: New Batch: Scanning 1 messages, 1123 bytes
> Oct 12 18:16:28 msapiro MailScanner[2489]: Virus and Content Scanning: Starting
> Oct 12 18:16:30 msapiro MailScanner[2489]: Requeue: ED750235E9.AA31F to 2207A34012D
> Oct 12 18:16:30 msapiro postfix/smtpd[26916]: connect from localhost[127.0.0.1]
> Oct 12 18:16:30 msapiro postfix/smtpd[26916]: 63BC1340122: client=localhost[127.0.0.1]
> Oct 12 18:16:30 msapiro postfix/cleanup[26921]: 63BC1340122: message-id=<20181013011623.7002C340121 at msapiro.net>
> Oct 12 18:16:30 msapiro postfix/qmgr[2472]: 63BC1340122: from=<mark at msapiro.net>, size=1635, nrcpt=1 (queue active)
> Oct 12 18:16:30 msapiro postfix/smtpd[26916]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
> Oct 12 18:16:30 msapiro MailScanner[2489]: Uninfected: Delivered 1 messages
> Oct 12 18:16:30 msapiro postfix/local[26969]: 63BC1340122: to=<mark at msapiro.net>, relay=local, delay=0.13, delays=0.08/0.01/0/0.04, dsn=2.0.0, status=sent (delivered to mailbox)
> Oct 12 18:16:30 msapiro postfix/qmgr[2472]: 63BC1340122: removed
> Oct 12 18:16:30 msapiro MailScanner[2489]: Deleted 1 messages from processing-database

You will see this entry on the incoming message

> Oct 12 18:16:23 msapiro postfix/smtpd[26916]: disconnect from msapiro-enet.attlocal.net[10.211.115.100] helo=1 mail=1 rcpt=2 data=1 quit=1 commands=6

has two rcpt commands, but this

> Oct 12 18:16:30 msapiro postfix/smtpd[26916]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4

has only one. The original two rcpts were mark at msapiro.net (local) and
mark at ms2.msapiro.net (remote) and apparently when the milter reinjected
the scanned message the only rcpt was mark at msapiro.net.

I did another test where both rcpts were local, mark at msapiro.net and
root at msapiro.net with the same result.

I did a third and fourth test where I reversed the order of the rcpt
commands in the initial submission and the result is the ultimate
delivery is only to the first rcpt in the initial submission whether or
not that recipient is local or remote.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From iversons at rushville.k12.in.us  Sat Oct 13 06:00:22 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sat, 13 Oct 2018 02:00:22 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <0f60ebcc-5a3c-f3f7-2d56-f0bd458d3dcd@msapiro.net>
References: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
 <0f60ebcc-5a3c-f3f7-2d56-f0bd458d3dcd@msapiro.net>
Message-ID: <CABu_8z+MYCfWAjq-f361NquKoOB7YaQcbi8ePbV3jau3R4NinQ@mail.gmail.com>

Thanks for the tests Mark.  This will definitely need fixed.

On Fri, Oct 12, 2018 at 9:47 PM Mark Sapiro <mark at msapiro.net> wrote:

> On Fri, 12 Oct 2018 07:40:40 -0400 Shawn Iverson via MailScanner
> <mailscanner at lists.mailscanner.info> wrote:
>
> > Ok.  I'll run some tests and see what happens.  Were both recipients in
> the
> > To: field?
>
> I have run a simple test with a message with one local and one remote
> recipient.
>
> I get this in the log:
>
> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: connect from
> msapiro-enet.attlocal.net[10.211.115.100]
> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: 7002C340121: client=
> msapiro-enet.attlocal.net[10.211.115.100]
> > Oct 12 18:16:23 msapiro postfix/cleanup[26921]: 7002C340121: message-id=<
> 20181013011623.7002C340121 at msapiro.net>
> > Oct 12 18:16:23 msapiro postfix/cleanup[26921]: 7002C340121:
> milter-discard: END-OF-MESSAGE from msapiro-enet.attlocal.net[10.211.115.100]:
> milter triggers DISCARD action; from=<mark at msapiro.net> to=<
> mark at ms2.msapiro.net> proto=SMTP helo=<msapiro.net>
> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: disconnect from
> msapiro-enet.attlocal.net[10.211.115.100] helo=1 mail=1 rcpt=2 data=1
> quit=1 commands=6
> > Oct 12 18:16:28 msapiro MailScanner[2489]: New Batch: Scanning 1
> messages, 1123 bytes
> > Oct 12 18:16:28 msapiro MailScanner[2489]: Virus and Content Scanning:
> Starting
> > Oct 12 18:16:30 msapiro MailScanner[2489]: Requeue: ED750235E9.AA31F to
> 2207A34012D
> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: connect from
> localhost[127.0.0.1]
> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: 63BC1340122:
> client=localhost[127.0.0.1]
> > Oct 12 18:16:30 msapiro postfix/cleanup[26921]: 63BC1340122: message-id=<
> 20181013011623.7002C340121 at msapiro.net>
> > Oct 12 18:16:30 msapiro postfix/qmgr[2472]: 63BC1340122: from=<
> mark at msapiro.net>, size=1635, nrcpt=1 (queue active)
> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: disconnect from
> localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
> > Oct 12 18:16:30 msapiro MailScanner[2489]: Uninfected: Delivered 1
> messages
> > Oct 12 18:16:30 msapiro postfix/local[26969]: 63BC1340122: to=<
> mark at msapiro.net>, relay=local, delay=0.13, delays=0.08/0.01/0/0.04,
> dsn=2.0.0, status=sent (delivered to mailbox)
> > Oct 12 18:16:30 msapiro postfix/qmgr[2472]: 63BC1340122: removed
> > Oct 12 18:16:30 msapiro MailScanner[2489]: Deleted 1 messages from
> processing-database
>
> You will see this entry on the incoming message
>
> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: disconnect from
> msapiro-enet.attlocal.net[10.211.115.100] helo=1 mail=1 rcpt=2 data=1
> quit=1 commands=6
>
> has two rcpt commands, but this
>
> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: disconnect from
> localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
>
> has only one. The original two rcpts were mark at msapiro.net (local) and
> mark at ms2.msapiro.net (remote) and apparently when the milter reinjected
> the scanned message the only rcpt was mark at msapiro.net.
>
> I did another test where both rcpts were local, mark at msapiro.net and
> root at msapiro.net with the same result.
>
> I did a third and fourth test where I reversed the order of the rcpt
> commands in the initial submission and the result is the ultimate
> delivery is only to the first rcpt in the initial submission whether or
> not that recipient is local or remote.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181013/8f6955b0/attachment.html>

From iversons at rushville.k12.in.us  Sun Oct 14 14:17:17 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 14 Oct 2018 10:17:17 -0400
Subject: Problems with 5.1.1 milter
In-Reply-To: <CABu_8z+MYCfWAjq-f361NquKoOB7YaQcbi8ePbV3jau3R4NinQ@mail.gmail.com>
References: <CABu_8zKx+kQxHQzUo4Zv9-Qf1SSQ_uX3=1kUZjqnUP60HuG_rg@mail.gmail.com>
 <0f60ebcc-5a3c-f3f7-2d56-f0bd458d3dcd@msapiro.net>
 <CABu_8z+MYCfWAjq-f361NquKoOB7YaQcbi8ePbV3jau3R4NinQ@mail.gmail.com>
Message-ID: <CABu_8zLB2m+vFLvTvKu4D14HRfho1jjCEFDHEqFAUBqKwaBDzQ@mail.gmail.com>

Made some very significant updates to the milter over the last couple of
days...thanks to everyone who gave it a test run.

1) Refactor milter to write out incoming message to disk in batches to
handle large content (fixes a buffer overflow)
2) Refactor milter scanner to evaluate whitelist and blacklist earlier and
reject quicker
3) Fix the off by one add of the headers to the end of the header section
4) Remove more unused code applicable to postfix queuing
5) Refactor milter to pass original recipients and senders via a milter
pre-data header.  Resolves issue of revealing multiple recipients in header.
6) Add support for sending multple original recipients in SMTP conversation
after scanning

All code is in the master branch.  I'm going to work on a couple more fixes
unrelated to the milter before testing and releasing a 5.1.2 build.

On Sat, Oct 13, 2018 at 2:00 AM Shawn Iverson <iversons at rushville.k12.in.us>
wrote:

> Thanks for the tests Mark.  This will definitely need fixed.
>
> On Fri, Oct 12, 2018 at 9:47 PM Mark Sapiro <mark at msapiro.net> wrote:
>
>> On Fri, 12 Oct 2018 07:40:40 -0400 Shawn Iverson via MailScanner
>> <mailscanner at lists.mailscanner.info> wrote:
>>
>> > Ok.  I'll run some tests and see what happens.  Were both recipients in
>> the
>> > To: field?
>>
>> I have run a simple test with a message with one local and one remote
>> recipient.
>>
>> I get this in the log:
>>
>> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: connect from
>> msapiro-enet.attlocal.net[10.211.115.100]
>> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: 7002C340121: client=
>> msapiro-enet.attlocal.net[10.211.115.100]
>> > Oct 12 18:16:23 msapiro postfix/cleanup[26921]: 7002C340121:
>> message-id=<20181013011623.7002C340121 at msapiro.net>
>> > Oct 12 18:16:23 msapiro postfix/cleanup[26921]: 7002C340121:
>> milter-discard: END-OF-MESSAGE from msapiro-enet.attlocal.net[10.211.115.100]:
>> milter triggers DISCARD action; from=<mark at msapiro.net> to=<
>> mark at ms2.msapiro.net> proto=SMTP helo=<msapiro.net>
>> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: disconnect from
>> msapiro-enet.attlocal.net[10.211.115.100] helo=1 mail=1 rcpt=2 data=1
>> quit=1 commands=6
>> > Oct 12 18:16:28 msapiro MailScanner[2489]: New Batch: Scanning 1
>> messages, 1123 bytes
>> > Oct 12 18:16:28 msapiro MailScanner[2489]: Virus and Content Scanning:
>> Starting
>> > Oct 12 18:16:30 msapiro MailScanner[2489]: Requeue: ED750235E9.AA31F to
>> 2207A34012D
>> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: connect from
>> localhost[127.0.0.1]
>> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: 63BC1340122:
>> client=localhost[127.0.0.1]
>> > Oct 12 18:16:30 msapiro postfix/cleanup[26921]: 63BC1340122:
>> message-id=<20181013011623.7002C340121 at msapiro.net>
>> > Oct 12 18:16:30 msapiro postfix/qmgr[2472]: 63BC1340122: from=<
>> mark at msapiro.net>, size=1635, nrcpt=1 (queue active)
>> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: disconnect from
>> localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
>> > Oct 12 18:16:30 msapiro MailScanner[2489]: Uninfected: Delivered 1
>> messages
>> > Oct 12 18:16:30 msapiro postfix/local[26969]: 63BC1340122: to=<
>> mark at msapiro.net>, relay=local, delay=0.13, delays=0.08/0.01/0/0.04,
>> dsn=2.0.0, status=sent (delivered to mailbox)
>> > Oct 12 18:16:30 msapiro postfix/qmgr[2472]: 63BC1340122: removed
>> > Oct 12 18:16:30 msapiro MailScanner[2489]: Deleted 1 messages from
>> processing-database
>>
>> You will see this entry on the incoming message
>>
>> > Oct 12 18:16:23 msapiro postfix/smtpd[26916]: disconnect from
>> msapiro-enet.attlocal.net[10.211.115.100] helo=1 mail=1 rcpt=2 data=1
>> quit=1 commands=6
>>
>> has two rcpt commands, but this
>>
>> > Oct 12 18:16:30 msapiro postfix/smtpd[26916]: disconnect from
>> localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
>>
>> has only one. The original two rcpts were mark at msapiro.net (local) and
>> mark at ms2.msapiro.net (remote) and apparently when the milter reinjected
>> the scanned message the only rcpt was mark at msapiro.net.
>>
>> I did another test where both rcpts were local, mark at msapiro.net and
>> root at msapiro.net with the same result.
>>
>> I did a third and fourth test where I reversed the order of the rcpt
>> commands in the initial submission and the result is the ultimate
>> delivery is only to the first rcpt in the initial submission whether or
>> not that recipient is local or remote.
>>
>> --
>> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
>> San Francisco Bay Area, California    better use your sense - B. Dylan
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181014/342b90f5/attachment.html>

From iversons at rushville.k12.in.us  Sun Oct 14 22:54:51 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 14 Oct 2018 18:54:51 -0400
Subject: Message attempted to kill MailScanner
In-Reply-To: <CABu_8zKvv4-Vvx2+HRFNAEXrKnW58AZw7KfQtvY+xBmrxNc0Pg@mail.gmail.com>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
 <006e01d45bdb$5c4072c0$14c15840$@stanga.net>
 <00ef01d45ef4$6a4decf0$3ee9c6d0$@stanga.net>
 <CABu_8zKvv4-Vvx2+HRFNAEXrKnW58AZw7KfQtvY+xBmrxNc0Pg@mail.gmail.com>
Message-ID: <CABu_8z+3rSfOX5QuKibuBrEzh9iHHyHFe0gATeqcdBjpfGeh8w@mail.gmail.com>

Dobril,

Can you share with me what version of MIME::Tools you have on your system?

You can run "cpan -D MIME::Tools"

My version 5.505, and I cannot reproduce your issue with the provided
subject line.



On Mon, Oct 8, 2018 at 7:57 AM Shawn Iverson <iversons at rushville.k12.in.us>
wrote:

> I haven't had a chance to look at it yet (working 2 jobs at the moment),
> but as soon as I can I will take a look, unless someone else happens to
> jump in.
>
> On Mon, Oct 8, 2018 at 6:48 AM DobriL Dobrilov <dobril at stanga.net> wrote:
>
>> Does anyone know how I can solve this issue.
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> *Dobril Dobrilov*
>>
>> IT Manager
>>
>> *dobril at stanga.net <dobril at stanga.net>*
>>
>> [image: StangaOne1 unit fo STANGA AD]
>>
>> 43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
>> Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
>> Mobile: +359 878 749 387
>>
>>
>>
>> [image: StangaOne1]
>>
>> We shape Digital *www.stanga.net* <http://www.stanga.net>
>>
>> [image: BSB]
>>
>> We re-invent Video *www.bsbvision.com* <http://www.bsbvision.com>
>>
>> [image: Shanga]
>>
>> We build Apps *www.shanga.co* <http://www.shanga.co>
>>
>> [image: S*Bar]
>>
>> We support Start-Ups *www.mysbar.net* <http://www.mysbar.net>
>>
>>
>>
>>
>>
>> *From:* MailScanner [mailto:mailscanner-bounces+dobril=
>> stanga.net at lists.mailscanner.info] *On Behalf Of *DobriL Dobrilov
>> *Sent:* Thursday, October 4, 2018 3:11 PM
>> *To:* 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
>> *Subject:* RE: Message attempted to kill MailScanner
>>
>>
>>
>> Hello,
>>
>>
>>
>> This is the error message which MailScanner show in debug mode, after
>> that immediately quit.
>>
>>
>>
>>
>>
>> Wide character in subroutine entry at
>> /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616
>>
>> *From:* MailScanner [
>> mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info
>> <mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info>] *On
>> Behalf Of *Shawn Iverson via MailScanner
>> *Sent:* Wednesday, October 3, 2018 6:04 PM
>> *To:* mailscanner at lists.mailscanner.info
>> *Cc:* Shawn Iverson <iversons at rushville.k12.in.us>
>> *Subject:* Re: Message attempted to kill MailScanner
>>
>>
>>
>> Debugging...
>>
>>
>>
>> Enable Debug=yes in MailScanner.conf
>>
>>
>>
>> Empty all queues
>>
>> Stop MailScanner daemons
>>
>>
>>
>> Submit the suspect message to mta using appropriate mta tool
>>
>>
>>
>> Run /usr/sbin/MailScanner, let it try to process the message, and capture
>> all output and the output in /var/log/maillog
>>
>>
>>
>> You can process winmail.dat yourself using the tnef binary utility on
>> your server.
>>
>>
>>
>> On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net> wrote:
>>
>> Hello,
>>
>>
>>
>> I just received error notification from MailScanner.
>>
>>
>>
>> Other Bad Content Detected ?
>>
>> Report: MailScanner: Message attempted to kill MailScanner
>>
>> ?
>>
>>
>>
>> Then I try to review the mail from archive. Temporary bypass scanning and
>> deliver to my box. The mail contain another attached email which contain
>> attached email too which  finally contain JPG image.
>>
>> I try to forward to myself this time I get:
>>
>> The following e-mails were found to have: Other Bad Content Detected -
>>
>>
>>
>> The question is how I can debug those email and to find what exactly
>> cause the issue.
>>
>> Possible reasons for me are:
>>
>> -       Bad character in the subject  because the Subject is
>>
>> ?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=
>>
>> =?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=
>>
>> =?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=?
>>
>>
>>
>> -       TNEF just cannot process attached email. From this perspective
>> how I can extract winmail.dat from the message and to process it manually
>> with TNEF.
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>>
>>
>> --
>>
>> Shawn Iverson, CETL
>>
>> Director of Technology
>>
>> Rush County Schools
>>
>> 765-932-3901 x1171
>>
>> iversons at rushville.k12.in.us
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us
>
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181014/c8d319b3/attachment.html>

From dobril at stanga.net  Mon Oct 15 07:31:08 2018
From: dobril at stanga.net (DobriL Dobrilov)
Date: Mon, 15 Oct 2018 10:31:08 +0300
Subject: Message attempted to kill MailScanner
In-Reply-To: <CABu_8z+3rSfOX5QuKibuBrEzh9iHHyHFe0gATeqcdBjpfGeh8w@mail.gmail.com>
References: <02a901d45af6$9c541dc0$d4fc5940$@stanga.net>
 <CABu_8zLWgTQtMTWYiWSk-__diog6UXGta8fghfQimg5qHfTz2g@mail.gmail.com>
 <006e01d45bdb$5c4072c0$14c15840$@stanga.net>
 <00ef01d45ef4$6a4decf0$3ee9c6d0$@stanga.net>
 <CABu_8zKvv4-Vvx2+HRFNAEXrKnW58AZw7KfQtvY+xBmrxNc0Pg@mail.gmail.com>
 <CABu_8z+3rSfOX5QuKibuBrEzh9iHHyHFe0gATeqcdBjpfGeh8w@mail.gmail.com>
Message-ID: <005c01d46459$0a0873a0$1e195ae0$@stanga.net>

Hello Shawn,

 

Mime tools version looks very similar to your

MIME::Tools

-------------------------------------------------------------------------

        (no description)

        D/DS/DSKOLL/MIME-tools-5.509.tar.gz

        /usr/local/share/perl/5.24.1/MIME/Tools.pm

        Installed: 5.509

        CPAN:      5.509  up to date

        Dianne Skoll (DSKOLL)

        dfs+pause at roaringpenguin.com <mailto:dfs+pause at roaringpenguin.com> 

 

 

Until now the issues happens few times from same mail provider.

All the times it is email with attached inside 2nd email.

Let me know where I can send you some of these problematic emails as file, which I can take from MailScanner archive folder.

 

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Monday, October 15, 2018 1:55 AM
To: mailscanner at lists.mailscanner.info
Cc: Shawn Iverson <iversons at rushville.k12.in.us>
Subject: Re: Message attempted to kill MailScanner

 

Dobril, 

 

Can you share with me what version of MIME::Tools you have on your system?

 

You can run "cpan -D MIME::Tools"

 

My version 5.505, and I cannot reproduce your issue with the provided subject line.

 

 

 

On Mon, Oct 8, 2018 at 7:57 AM Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> > wrote:

I haven't had a chance to look at it yet (working 2 jobs at the moment), but as soon as I can I will take a look, unless someone else happens to jump in.

 

On Mon, Oct 8, 2018 at 6:48 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Does anyone know how I can solve this issue.

 

 

 

 



Dobril Dobrilov


IT Manager


 <mailto:dobril at stanga.net> dobril at stanga.net




43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
Mobile: +359 878 749 387

 


We shape Digital  <http://www.stanga.net> www.stanga.net


We re-invent Video  <http://www.bsbvision.com> www.bsbvision.com


We build Apps  <http://www.shanga.co> www.shanga.co


We support Start-Ups  <http://www.mysbar.net> www.mysbar.net

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril <mailto:mailscanner-bounces%2Bdobril> =stanga.net at lists.mailscanner.info <mailto:stanga.net at lists.mailscanner.info> ] On Behalf Of DobriL Dobrilov
Sent: Thursday, October 4, 2018 3:11 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: RE: Message attempted to kill MailScanner

 

Hello,

 

This is the error message which MailScanner show in debug mode, after that immediately quit.

 

 

Wide character in subroutine entry at /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Wednesday, October 3, 2018 6:04 PM
To: mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
Cc: Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> >
Subject: Re: Message attempted to kill MailScanner

 

Debugging...

 

Enable Debug=yes in MailScanner.conf

 

Empty all queues

Stop MailScanner daemons

 

Submit the suspect message to mta using appropriate mta tool

 

Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog

 

You can process winmail.dat yourself using the tnef binary utility on your server.

 

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

 

I just received error notification from MailScanner.

 

Other Bad Content Detected ?

Report: MailScanner: Message attempted to kill MailScanner

?

 

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

?Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=? 

 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 option 7

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181015/fc26e35f/attachment.html>

From nerijus at users.sourceforge.net  Mon Oct 15 14:12:25 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Mon, 15 Oct 2018 17:12:25 +0300
Subject: Message attempted to kill MailScanner
Message-ID: <Mahogany-0.68.0-10033-20181015-171225.01@nerijus.sat.lt>

Hello,

I have a message for which the sender got this report:
Our virus detector failed to completely analyse a message you sent:-
   To: ...
   Subject: Fwd: ...
   Date: Mon Oct 15 16:38:17 2018
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK

The virus detector said this about the message:
Report: Report: MailScanner: Message attempted to kill MailScanner

I can provide the message if anyone wants to take a look at it (but I don't
want to send it to the list).

Regards,
Nerijus

From iversons at rushville.k12.in.us  Mon Oct 15 20:43:39 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Mon, 15 Oct 2018 16:43:39 -0400
Subject: Message attempted to kill MailScanner
In-Reply-To: <Mahogany-0.68.0-10033-20181015-171225.01@nerijus.sat.lt>
References: <Mahogany-0.68.0-10033-20181015-171225.01@nerijus.sat.lt>
Message-ID: <CABu_8z+r-rVHTLP5fBTgpih6oYcADh34G74tNTYqtGvG6a7KPA@mail.gmail.com>

Nerijus,

Feel free to send me a sample.

On Mon, Oct 15, 2018 at 10:12 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> Hello,
>
> I have a message for which the sender got this report:
> Our virus detector failed to completely analyse a message you sent:-
>    To: ...
>    Subject: Fwd: ...
>    Date: Mon Oct 15 16:38:17 2018
> Any parts of the message that could not be analysed will not have been
> delivered.
>
> If you are using Microsoft Outlook, we strongly recommend you change your
> outgoing message format from "Rich Text" to "HTML" or "Plain Text".
>
> 1) Click on the "Tools" menu and choose "Options..."
> 2) Go to the "Mail Format" tab
> 3) For message format, select "HTML" or "Plain text"
> 4) Click OK
>
> The virus detector said this about the message:
> Report: Report: MailScanner: Message attempted to kill MailScanner
>
> I can provide the message if anyone wants to take a look at it (but I don't
> want to send it to the list).
>
> Regards,
> Nerijus
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181015/5c50e5b9/attachment.html>

From koby at mksoft.co.il  Wed Oct 17 13:07:18 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 17 Oct 2018 16:07:18 +0300
Subject: Milter Issue
Message-ID: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181017/a0997f53/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 17 13:12:58 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 17 Oct 2018 09:12:58 -0400
Subject: Milter Issue
In-Reply-To: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
Message-ID: <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>

Do you have AppArmor enabled?

On Wed, Oct 17, 2018 at 9:07 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Hello Group ,
>
>
> I having the following issue with MS as milter.
>
>
>
> I get this error when i run "/usr/sbin/ms-cron HOURLY" for checking
>
>
> regular_text: Could not read directory / at
> /usr/share/MailScanner/perl/MailScanner/Config.pm line 2866.
> regular_text: Error in configuration file line 191, directory
> /var/spool/Mailscanner/milterout for outqueuedir does not exist (or is not
> readable) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3232.
>
>
> The var/spool/Mailscanner/milterout does exists and own by postfix
>
>
> MS Ver 5.1.1
>
> My Os : ubuntu 18.04
>
> Thank you for any help
>
>
> Koby Peleg Hen
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181017/4b3342a0/attachment.html>

From koby at mksoft.co.il  Wed Oct 17 13:20:11 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 17 Oct 2018 16:20:11 +0300
Subject: Milter Issue
In-Reply-To: <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
Message-ID: <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181017/fa0ff5ca/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 17 13:23:38 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 17 Oct 2018 09:23:38 -0400
Subject: Milter Issue
In-Reply-To: <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
 <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
Message-ID: <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>

Are you running "/usr/sbin/ms-cron HOURLY" as root or as postfix?

On Wed, Oct 17, 2018 at 9:20 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

>
> No.
>
> Do you have AppArmor enabled?
>
> On Wed, Oct 17, 2018 at 9:07 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>> Hello Group ,
>>
>>
>> I having the following issue with MS as milter.
>>
>>
>>
>> I get this error when i run "/usr/sbin/ms-cron HOURLY" for checking
>>
>>
>> regular_text: Could not read directory / at
>> /usr/share/MailScanner/perl/MailScanner/Config.pm line 2866.
>> regular_text: Error in configuration file line 191, directory
>> /var/spool/Mailscanner/milterout for outqueuedir does not exist (or is not
>> readable) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3232.
>>
>>
>> The var/spool/Mailscanner/milterout does exists and own by postfix
>>
>>
>> MS Ver 5.1.1
>>
>> My Os : ubuntu 18.04
>>
>> Thank you for any help
>>
>>
>> Koby Peleg Hen
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181017/1b0fa86c/attachment.html>

From koby at mksoft.co.il  Wed Oct 17 14:06:04 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 17 Oct 2018 17:06:04 +0300
Subject: Milter Issue
In-Reply-To: <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
 <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
 <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>
Message-ID: <2fe14820-40bb-470b-a4bd-d7d410e957b4@mksoft.co.il>

As root.

????? ???? 
???? ??? ?? - ????? ??????
??. ???. ???? ??????

???? ?-TypeApp ?

?-17 ????? 2018, 16:04, ?-Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info>, 16:04 ???:
>Are you running "/usr/sbin/ms-cron HOURLY" as root or as postfix?
>
>On Wed, Oct 17, 2018 at 9:20 AM Koby Peleg Hen <koby at mksoft.co.il>
>wrote:
>
>>
>> No.
>>
>> Do you have AppArmor enabled?
>>
>> On Wed, Oct 17, 2018 at 9:07 AM Koby Peleg Hen <koby at mksoft.co.il>
>wrote:
>>
>>> Hello Group ,
>>>
>>>
>>> I having the following issue with MS as milter.
>>>
>>>
>>>
>>> I get this error when i run "/usr/sbin/ms-cron HOURLY" for checking
>>>
>>>
>>> regular_text: Could not read directory / at
>>> /usr/share/MailScanner/perl/MailScanner/Config.pm line 2866.
>>> regular_text: Error in configuration file line 191, directory
>>> /var/spool/Mailscanner/milterout for outqueuedir does not exist (or
>is not
>>> readable) at /usr/share/MailScanner/perl/MailScanner/Config.pm line
>3232.
>>>
>>>
>>> The var/spool/Mailscanner/milterout does exists and own by postfix
>>>
>>>
>>> MS Ver 5.1.1
>>>
>>> My Os : ubuntu 18.04
>>>
>>> Thank you for any help
>>>
>>>
>>> Koby Peleg Hen
>>>
>>>
>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>
>> --
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 option 7
>> iversons at rushville.k12.in.us
>>
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
>-- 
>Shawn Iverson, CETL
>Director of Technology
>Rush County Schools
>765-932-3901 option 7
>iversons at rushville.k12.in.us
>
>
>------------------------------------------------------------------------
>
>
>
>-- 
>MailScanner mailing list
>mailscanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181017/67de3e68/attachment.html>

From mark at msapiro.net  Wed Oct 17 15:49:52 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Wed, 17 Oct 2018 08:49:52 -0700
Subject: Milter Issue
In-Reply-To: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
Message-ID: <9c1b77ed-05f9-92b8-2655-87dc672b3f13@msapiro.net>

On 10/17/18 6:07 AM, Koby Peleg Hen wrote:
> 
> The var/spool/Mailscanner/milterout does exists and own by postfix


Is your MainScanner Run As User also postfix?
ms-peek runasuser /etc/MailScanner/MailScanner.conf'

What does 'ls -la var/spool/Mailscanner/' show?

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From koby at mksoft.co.il  Thu Oct 18 08:15:24 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 18 Oct 2018 11:15:24 +0300
Subject: Milter Issue
In-Reply-To: <2fe14820-40bb-470b-a4bd-d7d410e957b4@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
 <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
 <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>
 <2fe14820-40bb-470b-a4bd-d7d410e957b4@mksoft.co.il>
Message-ID: <8b8e0a81-e4dd-486b-e981-7eceba8853de@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181018/1d74950b/attachment.html>

From iversons at rushville.k12.in.us  Thu Oct 18 08:20:40 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 18 Oct 2018 04:20:40 -0400
Subject: Milter Issue
In-Reply-To: <8b8e0a81-e4dd-486b-e981-7eceba8853de@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
 <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
 <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>
 <2fe14820-40bb-470b-a4bd-d7d410e957b4@mksoft.co.il>
 <8b8e0a81-e4dd-486b-e981-7eceba8853de@mksoft.co.il>
Message-ID: <CABu_8zJRLFdah=SdKiTvrqPXmWQ-cvqVf_Sr9p=5bq=At7kAnQ@mail.gmail.com>

Look closely, and you'll see it

*/var/spool/Mailscanner/milterout *

Should be:

/var/spool/MailScanner/milterout

This is a typo.

On Thu, Oct 18, 2018 at 4:15 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

>
> Here is setting...
>
>
> koby at lab:~$ ls -la /var/spool/MailScanner/
>
> total 28
> drwxr-xr-x  8 postfix mtagroup 4096 Oct 16 19:01 .
> drwxr-xr-x  7 root    postfix  4096 Oct 17 10:31 ..
> drwxrwxr-x  2 postfix mtagroup 4096 Oct 14 11:55 archive
> drwxrwxrwt 10 root    root      240 Oct 17 21:02 incoming
> drwxrwxr-x  2 postfix mtagroup 4096 Oct 17 21:01 milterin
> drwxrwxr-x  2 postfix mtagroup 4096 Oct 14 11:55 milterout
> drwxrwxr-x  3 postfix mtagroup 4096 Oct 17 13:28 quarantine
> drwx------  2 postfix postfix  4096 Oct 16 19:01 spamassassin
>
>
> koby at lab:/var/spool/MailScanner$ ms-peek runasuser
> /etc/MailScanner/MailScanner.conf
>
> postfix
>
>
> Here is my log...
>
>
> Oct 18 11:04:15 lab MSMilter[5594]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
> Oct 18 11:04:15 lab MSMilter[5594]: Reading configuration file
> /etc/MailScanner/conf.d/README
> Oct 18 11:04:15 lab MSMilter[5594]: Reading configuration file
> /etc/MailScanner/conf.d/SmgMailScanner.conf
> Oct 18 11:04:15 lab MSMilter[5594]: Configuration: Seen configuration file
> /etc/MailScanner/conf.d/README before, skipping.
> Oct 18 11:04:15 lab MSMilter[5594]: Configuration: Seen configuration file
> /etc/MailScanner/conf.d/SmgMailScanner.conf before, skipping.
> Oct 18 11:04:15 lab MSMilter[5594]: Could not read directory
> /var/spool/Mailscanner/milterout
>
>
> Oct 18 11:04:15 lab MSMilter[5594]: *Error in configuration file line
> 191, directory /var/spool/Mailscanner/milterout for outqueuedir does not
> exist (or is not readable)*
>
>
> Oct 18 11:04:15 lab MSMilter[5594]: Read 1500 hostnames from the phishing
> whitelist
> Oct 18 11:04:15 lab MSMilter[5594]: Read 16624 hostnames from the phishing
> blacklists
> Oct 18 11:04:15 lab root[5600]: MSMilter started
>
>
> Thank you all for any help.
>
>
>
> As root.
>
> ???? ?-TypeApp <http://www.typeapp.com/r?b=13761>
> ?-17 ????? 2018, ?-Shawn Iverson via MailScanner <
> mailscanner at lists.mailscanner.info>, 16:04 ???:
>>
>> Are you running "/usr/sbin/ms-cron HOURLY" as root or as postfix?
>>
>> On Wed, Oct 17, 2018 at 9:20 AM Koby Peleg Hen < koby at mksoft.co.il>
>> wrote:
>>
>>>
>>> No.
>>>
>>> Do you have AppArmor enabled?
>>>
>>> On Wed, Oct 17, 2018 at 9:07 AM Koby Peleg Hen < koby at mksoft.co.il>
>>> wrote:
>>>
>>>> Hello Group ,
>>>>
>>>>
>>>> I having the following issue with MS as milter.
>>>>
>>>>
>>>>
>>>> I get this error when i run "/usr/sbin/ms-cron HOURLY" for checking
>>>>
>>>>
>>>> regular_text: Could not read directory / at
>>>> /usr/share/MailScanner/perl/MailScanner/Config.pm line 2866.
>>>> regular_text: Error in configuration file line 191, directory
>>>> /var/spool/Mailscanner/milterout for outqueuedir does not exist (or is not
>>>> readable) at /usr/share/MailScanner/perl/MailScanner/Config.pm line 3232.
>>>>
>>>>
>>>> The var/spool/Mailscanner/milterout does exists and own by postfix
>>>>
>>>>
>>>> MS Ver 5.1.1
>>>>
>>>> My Os : ubuntu 18.04
>>>>
>>>> Thank you for any help
>>>>
>>>>
>>>> Koby Peleg Hen
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>>
>>>
>>> --
>>> Shawn Iverson, CETL
>>> Director of Technology
>>> Rush County Schools
>>> 765-932-3901 option 7
>>> iversons at rushville.k12.in.us
>>>
>>>
>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>
>> --
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 option 7
>> iversons at rushville.k12.in.us
>>
>>
>>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181018/cb60863c/attachment.html>

From koby at mksoft.co.il  Thu Oct 18 08:21:40 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 18 Oct 2018 11:21:40 +0300
Subject: Milter Issue
In-Reply-To: <8b8e0a81-e4dd-486b-e981-7eceba8853de@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
 <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
 <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>
 <2fe14820-40bb-470b-a4bd-d7d410e957b4@mksoft.co.il>
 <8b8e0a81-e4dd-486b-e981-7eceba8853de@mksoft.co.il>
Message-ID: <1a630293-2ff1-e7a8-3d25-f4bd09473399@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181018/7363181e/attachment-0001.html>

From koby at mksoft.co.il  Thu Oct 18 08:29:02 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 18 Oct 2018 11:29:02 +0300
Subject: Milter Issue
In-Reply-To: <1a630293-2ff1-e7a8-3d25-f4bd09473399@mksoft.co.il>
References: <a211e456-18ea-6a98-1421-007c824100d8@mksoft.co.il>
 <CABu_8zJXHtMUg7=qwf=2QJV2B+qg+ppj6mTFNHb5mTwGdz1_nQ@mail.gmail.com>
 <07c76957-6892-bd3c-93d8-f109b1f315e9@mksoft.co.il>
 <CABu_8zKwojUJDFfp0EOy3O+qgCC8nr3VvCeYhK+DJTR=_8Prmw@mail.gmail.com>
 <2fe14820-40bb-470b-a4bd-d7d410e957b4@mksoft.co.il>
 <8b8e0a81-e4dd-486b-e981-7eceba8853de@mksoft.co.il>
 <1a630293-2ff1-e7a8-3d25-f4bd09473399@mksoft.co.il>
Message-ID: <47159e33-2c29-96b8-4be3-c5e6302dc82a@mksoft.co.il>

I saw that.
Tnaks.


???? ?? ??? Koby Peleg Hen, ??18.10.2018 ???? 11:21:
> I found my error...
> 
> Case sensitive error....
> 
> my bad.
> 
> 
> Thank you all.
> 
> 
>> Here is setting...
>>
>>
>> koby at lab:~$ ls -la /var/spool/MailScanner/
>>
>> total 28
>> drwxr-xr-x? 8 postfix mtagroup 4096 Oct 16 19:01 .
>> drwxr-xr-x? 7 root??? postfix? 4096 Oct 17 10:31 ..
>> drwxrwxr-x? 2 postfix mtagroup 4096 Oct 14 11:55 archive
>> drwxrwxrwt 10 root??? root????? 240 Oct 17 21:02 incoming
>> drwxrwxr-x? 2 postfix mtagroup 4096 Oct 17 21:01 milterin
>> drwxrwxr-x? 2 postfix mtagroup 4096 Oct 14 11:55 milterout
>> drwxrwxr-x? 3 postfix mtagroup 4096 Oct 17 13:28 quarantine
>> drwx------? 2 postfix postfix? 4096 Oct 16 19:01 spamassassin
>>
>>
>> koby at lab:/var/spool/MailScanner$ ms-peek runasuser 
>> /etc/MailScanner/MailScanner.conf
>>
>> postfix
>>
>>
>> Here is my log...
>>
>>
>> Oct 18 11:04:15 lab MSMilter[5594]: Reading configuration file 
>> /etc/MailScanner/MailScanner.conf
>> Oct 18 11:04:15 lab MSMilter[5594]: Reading configuration file 
>> /etc/MailScanner/conf.d/README
>> Oct 18 11:04:15 lab MSMilter[5594]: Reading configuration file 
>> /etc/MailScanner/conf.d/SmgMailScanner.conf
>> Oct 18 11:04:15 lab MSMilter[5594]: Configuration: Seen configuration 
>> file /etc/MailScanner/conf.d/README before, skipping.
>> Oct 18 11:04:15 lab MSMilter[5594]: Configuration: Seen configuration 
>> file /etc/MailScanner/conf.d/SmgMailScanner.conf before, skipping.
>> Oct 18 11:04:15 lab MSMilter[5594]: Could not read directory 
>> /var/spool/Mailscanner/milterout
>>
>>
>> Oct 18 11:04:15 lab MSMilter[5594]:***Error in configuration file line 
>> 191, directory /var/spool/Mailscanner/milterout for outqueuedir does 
>> not exist (or is not readable)*
>>
>> *
>> *
>>
>> Oct 18 11:04:15 lab MSMilter[5594]: Read 1500 hostnames from the 
>> phishing whitelist
>> Oct 18 11:04:15 lab MSMilter[5594]: Read 16624 hostnames from the 
>> phishing blacklists
>> Oct 18 11:04:15 lab root[5600]: MSMilter started
>>
>>
>> Thank you all for any help.
>>
>>
>>
>>> As root.
>>>
>>> ???? ?-TypeApp <http://www.typeapp.com/r?b=13761>
>>> ?-17 ????? 2018, ?-Shawn Iverson via MailScanner 
>>> <mailscanner at lists.mailscanner.info 
>>> <mailto:mailscanner at lists.mailscanner.info>>, 16:04 ???:
>>>
>>>     Are you running "/usr/sbin/ms-cron HOURLY" as root or as postfix?
>>>
>>>     On Wed, Oct 17, 2018 at 9:20 AM Koby Peleg Hen <
>>>     koby at mksoft.co.il <mailto:koby at mksoft.co.il>> wrote:
>>>
>>>
>>>         No.
>>>
>>>>         Do you have AppArmor enabled?
>>>>
>>>>         On Wed, Oct 17, 2018 at 9:07 AM Koby Peleg Hen <
>>>>         koby at mksoft.co.il <mailto:koby at mksoft.co.il>> wrote:
>>>>
>>>>             Hello Group ,
>>>>
>>>>
>>>>             I having the following issue with MS as milter.
>>>>
>>>>
>>>>
>>>>             I get this error when i run "/usr/sbin/ms-cron HOURLY"
>>>>             for checking
>>>>
>>>>
>>>>             regular_text: Could not read directory / at
>>>>             /usr/share/MailScanner/perl/MailScanner/Config.pm line 2866.
>>>>             regular_text: Error in configuration file line 191,
>>>>             directory /var/spool/Mailscanner/milterout for
>>>>             outqueuedir does not exist (or is not readable) at
>>>>             /usr/share/MailScanner/perl/MailScanner/Config.pm line 3232.
>>>>
>>>>
>>>>             The var/spool/Mailscanner/milterout does exists and own
>>>>             by postfix
>>>>
>>>>
>>>>             MS Ver 5.1.1
>>>>
>>>>             My Os : ubuntu 18.04
>>>>
>>>>             Thank you for any help
>>>>
>>>>
>>>>             Koby Peleg Hen
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>             -- 
>>>>             MailScanner mailing list
>>>>             mailscanner at lists.mailscanner.info
>>>>             <mailto:mailscanner at lists.mailscanner.info>
>>>>             http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>>
>>>>
>>>>         -- 
>>>>         Shawn Iverson, CETL
>>>>         Director of Technology
>>>>         Rush County Schools
>>>>         765-932-3901 option 7
>>>>         iversons at rushville.k12.in.us
>>>>         <mailto:iversons at rushville.k12.in.us>
>>>>
>>>>
>>>>
>>>
>>>
>>>         -- 
>>>         MailScanner mailing list
>>>         mailscanner at lists.mailscanner.info
>>>         <mailto:mailscanner at lists.mailscanner.info>
>>>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>>
>>>     -- 
>>>     Shawn Iverson, CETL
>>>     Director of Technology
>>>     Rush County Schools
>>>     765-932-3901 option 7
>>>     iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>>>
>>>
>>>
>>
> 
> 
> 

From koby at mksoft.co.il  Thu Oct 18 08:44:14 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 18 Oct 2018 11:44:14 +0300
Subject: Blacklist Every message
Message-ID: <1d4c430b-6ce5-5191-c6ad-53f9f846feab@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181018/7c219c13/attachment.html>

From iversons at rushville.k12.in.us  Thu Oct 18 09:11:01 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 18 Oct 2018 05:11:01 -0400
Subject: Blacklist Every message
In-Reply-To: <1d4c430b-6ce5-5191-c6ad-53f9f846feab@mksoft.co.il>
References: <1d4c430b-6ce5-5191-c6ad-53f9f846feab@mksoft.co.il>
Message-ID: <CABu_8z+3upwZszFSFJfp+qQWFgicg8atnA=L=i0O3T1_O6RJtg@mail.gmail.com>

What is in your blacklist for MailScanner?

On Thu, Oct 18, 2018 at 4:44 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Hello All,
>
>
> My milter give that error on every message ,
>
> Am I missing some thing ?
>
>
> Here is the error (:
>
>  milter-reject: END-OF-MESSAGE from mail-lj1-f169.google.com[209.85.208.169]:
> 5.7.1 Message Blacklisted;
>
>  from=<kph.hunter at gmail.com> to=<admin at ofc.mksoft.co.il> proto=ESMTP
> helo=<mail-lj1-f169.google.com>
>
>
> Thank you all for any help.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181018/7f53a899/attachment.html>

From koby at mksoft.co.il  Wed Oct 24 10:45:30 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 24 Oct 2018 13:45:30 +0300
Subject: Milter No DSN
Message-ID: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/e700476b/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 24 11:14:44 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 07:14:44 -0400
Subject: Milter No DSN
In-Reply-To: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
Message-ID: <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>

Can you share with us what you see in the log and elaborate on what is
missing?

On Wed, Oct 24, 2018 at 6:45 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Hello all ,
>
> I am in a middle of config my mailscanner and I notice that dsn message
> not avail all the time.
>
> If I send virus test it does shoe dsn on the log, with simple test it does
> NOT.
>
>
> Any one please help
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/4027985a/attachment.html>

From koby at mksoft.co.il  Wed Oct 24 11:21:14 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 24 Oct 2018 14:21:14 +0300
Subject: Milter No DSN
In-Reply-To: <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
Message-ID: <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/7b9a06f7/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 24 11:30:13 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 07:30:13 -0400
Subject: Milter No DSN
In-Reply-To: <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
Message-ID: <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>

It appears that all that was sent in the first conversation was just the
warning message to the postmaster.  The cleaned message didn't get
delivered either.

Do you have files showing up in /var/spool/MailScanner/milterout ?

What is the value of your Outbound Queue in your MailScanner configuration?

On Wed, Oct 24, 2018 at 7:21 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

>
> Here is the log fir the virus testing....
>
>
> Oct 23 14:37:05 lab MailScanner[22102]: Viruses marked as silent: Clamd:
> eicar.txt was infected: Eicar-Test-Signature
> Oct 23 14:37:05 lab MailScanner[22102]: Saved infected "eicar.txt" to
> /var/spool/MailScanner/quarantine/20181023/42fWZS3d3Lz6qF0
> Oct 23 14:37:05 lab MailScanner[22102]: Spam Checks: Starting
> Oct 23 14:37:08 lab MailScanner[22102]: Message 42fWZS3d3Lz6qF0 from
> 199.203.52.126 (koby at mksoft.co.il) to ofc.mksoft.co.il is not spam,
> SpamAssassin
> ot cached, score=0.701, required 6, HTML_IMAGE_ONLY_20 0.70, HTML_MESSAGE
> 0.00, SPF_HELO_PASS -0.00, URIBL_BLOCKED 0.00)
> (n
> Oct 23 14:37:08 lab MailScanner[22102]: Delivery of nonspam: message
> 42fWZS3d3Lz6qF0 from koby at mksoft.co.il to admin at ofc.mksoft.co.il with
> subject te
> eicar
> st
> Oct 23 14:37:08 lab MailScanner[22102]: Requeue: 42fWZS3d3Lz6qF0 to
> 42fWZX3qtNz23hG
> Oct 23 14:37:08 lab MailScanner[22102]: Cleaned: Delivered 1 cleaned
> messages
> Oct 23 14:37:08 lab postfix/pickup[20855]: 9E1414320B: uid=112
> from=<postmaster>
> Oct 23 14:37:08 lab postfix/cleanup[22747]: 9E1414320B: message-id=
> <20181023113708.9E1414320B at lab.mksoft.co.il>
> <20181023113708.9E1414320B at lab.mksoft.co.il>
> Oct 23 14:37:08 lab postfix/qmgr[2474]: 9E1414320B: from=
> <postmaster at lab.mksoft.co.il> <postmaster at lab.mksoft.co.il>, size=2226,
> nrcpt=1 (queue active)
> Oct 23 14:37:08 lab MailScanner[22102]: Notices: Warned about 1 messages
> Oct
> Oct 23 14:37:08 lab postfix/smtp[22916]: 9E1414320B: to=
> <postmaster at lab.mksoft.co.il> <postmaster at lab.mksoft.co.il>,
> orig_to=<postmaster>, relay=ofc.mksoft.co.il[192.168.50.100]:
> delay=0.21, delays=0.01/0.01/0.13/0.07, dsn=2.0.0, *status=sent (250
> 2.0.0 Ok: queued as 5884E28505E)*
> 25,
> Oct 23 14:37:08 lab postfix/qmgr[2474]: 9E1414320B: removed
>
> Here is the log for the simple test ..... (no DSN...)
>
>
> Oct 23 14:54:25 lab postfix/smtpd[27640]: connect from
> mail-lf1-f47.google.com[209.85.167.47]
> Oct 23 14:54:25 lab postfix/smtpd[27640]: BA81C40068: client=
> mail-lf1-f47.google.com[209.85.167.47]
> Oct 23 14:54:25 lab postfix/cleanup[27645]: BA81C40068: message-id=
> <CA+MqEvMEAyLvrsrLbECSY4HnJPPu=U+YgFcY+VXcuA6oV=DnYA at mail.gmail.com>
> <CA+MqEvMEAyLvrsrLbECSY4HnJPPu=U+YgFcY+VXcuA6oV=DnYA at mail.gmail.com>
> Oct 23 14:54:26 lab postfix/cleanup[27645]: BA81C40068: milter-discard:
> END-OF-MESSAGE from mail-lf1-f47.google.com[209.85.167.47]: milter
> triggers DISCARD action; from=<kph.hunter at gmail.com>
> <kph.hunter at gmail.com> to=<admin at ofc.mksoft.co.il>
> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<mail-lf1-f47.google.com>
> Oct 23 14:54:26 lab postfix/smtpd[27640]: disconnect from
> mail-lf1-f47.google.com[209.85.167.47] ehlo=2 starttls=1 mail=1 rcpt=1
> data=1 quit=1 commands=7
> Oct 23 14:54:26 lab MailScanner[22102]: New Batch: Scanning 1 messages,
> 2746 bytes
> Oct 23 14:54:26 lab MailScanner[22102]: Virus and Content Scanning:
> Starting
> Oct 23 14:54:26 lab MailScanner[22102]: Spam Checks: Starting
> Oct 23 14:54:29 lab MailScanner[22102]: Message 42fWyT5LpVz5ZLC from
> 209.85.167.47 (kph.hunter at gmail.com) to ofc.mksoft.co.il is not spam,
> SpamAssassin (not cached, score=0.007, required 6, autolearn=not spam,
> DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, FREEMAIL_FROM
> 0.00, FROM_EXCESS_BASE64 0.10, HTML_MESSAGE 0.00)
> Oct 23 14:54:29 lab MailScanner[22102]: Delivery of nonspam: message
> 42fWyT5LpVz5ZLC from kph.hunter at gmail.com to admin at ofc.mksoft.co.il with
> subject test 2
> Oct 23 14:54:29 lab MailScanner[22102]: Requeue: 42fWyT5LpVz5ZLC to
> 42fWyY4STnz1xp6
> Oct 23 14:54:29 lab MailScanner[22102]: Uninfected: Delivered 1 messages
> Oct 23 14:54:29 lab MailScanner[22102]: Deleted 1 messages from
> processing-database
>
>
>
>
> ???? ?? ??? Shawn Iverson via MailScanner, ??24.10.2018 ???? 14:14:
>
> Can you share with us what you see in the log and elaborate on what is
> missing?
>
> On Wed, Oct 24, 2018 at 6:45 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>> Hello all ,
>>
>> I am in a middle of config my mailscanner and I notice that dsn message
>> not avail all the time.
>>
>> If I send virus test it does shoe dsn on the log, with simple test it
>> does NOT.
>>
>>
>> Any one please help
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/4e813d9b/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 24 11:36:28 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 07:36:28 -0400
Subject: MailScanner 5.1.2-1 Now Available
Message-ID: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>

https://www.mailscanner.info/

changelog

- Patch Mail::ClamAV to allow install for SuSE builds
- 7zip handle spaces in filenames
- Clamd full message scan
- Detect fax and tel links
- mime_perl_to_string fix for ignored handler
- Add Kaspersky Linux Mail Server support
- Ignore "archive damaged" in esets scanner output
- Cleanup reports, add en_uk reports
- Workaround MIME::Parser failing to decode UTF-8
- Refactor milter to fully support multiple original recipients
- Refactor milter to support large messages
- Refactor milter to reject blacklisted emails early
- Fix off by one header add in milter
- Look for all recipient records in DeleteRecipients
- Update milter doc to 1.3
- Remove invalid Apparmor code in debian package
- Fix condition concatenation in ms-update-phishing
- Fix mktemp in clamav-wrapper for FreeBSD11
- Add DrWeb virus scanner support
- Fixes for clamav on rhel variants

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/eea7e7cb/attachment.html>

From koby at mksoft.co.il  Wed Oct 24 11:39:13 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 24 Oct 2018 14:39:13 +0300
Subject: Milter No DSN
In-Reply-To: <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
Message-ID: <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/62dfab8b/attachment.html>

From koby at mksoft.co.il  Wed Oct 24 11:41:46 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 24 Oct 2018 14:41:46 +0300
Subject: Milter No DSN
In-Reply-To: <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
 <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
Message-ID: <785ec346-aced-04d2-1a56-ade8d9b5e091@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/f232bad4/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 24 11:42:40 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 07:42:40 -0400
Subject: Milter No DSN
In-Reply-To: <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
 <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
Message-ID: <CABu_8zK49L9-murtGJJ+c7b0ksOLBU=tv4grFqpHTvXXaXV=Dg@mail.gmail.com>

Sorry this setting,

"Outgoing Queue Dir ="

On Wed, Oct 24, 2018 at 7:39 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> wrong ,
>
> two of the message did send to the target.
>
>
> my Outbound Queue ? , sorry can not find that
>
> ls /var/spool/MailScanner/milterout : null
>
>
>
>
> It appears that all that was sent in the first conversation was just the
> warning message to the postmaster.  The cleaned message didn't get
> delivered either.
>
> Do you have files showing up in /var/spool/MailScanner/milterout ?
>
>
>
>
> What is the value of your Outbound Queue in your MailScanner configuration?
>
> On Wed, Oct 24, 2018 at 7:21 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>>
>> Here is the log fir the virus testing....
>>
>>
>> Oct 23 14:37:05 lab MailScanner[22102]: Viruses marked as silent: Clamd:
>> eicar.txt was infected: Eicar-Test-Signature
>> Oct 23 14:37:05 lab MailScanner[22102]: Saved infected "eicar.txt" to
>> /var/spool/MailScanner/quarantine/20181023/42fWZS3d3Lz6qF0
>> Oct 23 14:37:05 lab MailScanner[22102]: Spam Checks: Starting
>> Oct 23 14:37:08 lab MailScanner[22102]: Message 42fWZS3d3Lz6qF0 from
>> 199.203.52.126 (koby at mksoft.co.il) to ofc.mksoft.co.il is not spam,
>> SpamAssassin
>> ot cached, score=0.701, required 6, HTML_IMAGE_ONLY_20 0.70, HTML_MESSAGE
>> 0.00, SPF_HELO_PASS -0.00, URIBL_BLOCKED 0.00)
>> (n
>> Oct 23 14:37:08 lab MailScanner[22102]: Delivery of nonspam: message
>> 42fWZS3d3Lz6qF0 from koby at mksoft.co.il to admin at ofc.mksoft.co.il with
>> subject te
>> eicar
>> st
>> Oct 23 14:37:08 lab MailScanner[22102]: Requeue: 42fWZS3d3Lz6qF0 to
>> 42fWZX3qtNz23hG
>> Oct 23 14:37:08 lab MailScanner[22102]: Cleaned: Delivered 1 cleaned
>> messages
>> Oct 23 14:37:08 lab postfix/pickup[20855]: 9E1414320B: uid=112
>> from=<postmaster>
>> Oct 23 14:37:08 lab postfix/cleanup[22747]: 9E1414320B: message-id=
>> <20181023113708.9E1414320B at lab.mksoft.co.il>
>> <20181023113708.9E1414320B at lab.mksoft.co.il>
>> Oct 23 14:37:08 lab postfix/qmgr[2474]: 9E1414320B: from=
>> <postmaster at lab.mksoft.co.il> <postmaster at lab.mksoft.co.il>, size=2226,
>> nrcpt=1 (queue active)
>> Oct 23 14:37:08 lab MailScanner[22102]: Notices: Warned about 1 messages
>> Oct
>> Oct 23 14:37:08 lab postfix/smtp[22916]: 9E1414320B: to=
>> <postmaster at lab.mksoft.co.il> <postmaster at lab.mksoft.co.il>,
>> orig_to=<postmaster>, relay=ofc.mksoft.co.il[192.168.50.100]:
>> delay=0.21, delays=0.01/0.01/0.13/0.07, dsn=2.0.0, *status=sent (250
>> 2.0.0 Ok: queued as 5884E28505E)*
>> 25,
>> Oct 23 14:37:08 lab postfix/qmgr[2474]: 9E1414320B: removed
>>
>> Here is the log for the simple test ..... (no DSN...)
>>
>>
>> Oct 23 14:54:25 lab postfix/smtpd[27640]: connect from
>> mail-lf1-f47.google.com[209.85.167.47]
>> Oct 23 14:54:25 lab postfix/smtpd[27640]: BA81C40068: client=
>> mail-lf1-f47.google.com[209.85.167.47]
>> Oct 23 14:54:25 lab postfix/cleanup[27645]: BA81C40068: message-id=
>> <CA+MqEvMEAyLvrsrLbECSY4HnJPPu=U+YgFcY+VXcuA6oV=DnYA at mail.gmail.com>
>> <CA+MqEvMEAyLvrsrLbECSY4HnJPPu=U+YgFcY+VXcuA6oV=DnYA at mail.gmail.com>
>> Oct 23 14:54:26 lab postfix/cleanup[27645]: BA81C40068: milter-discard:
>> END-OF-MESSAGE from mail-lf1-f47.google.com[209.85.167.47]: milter
>> triggers DISCARD action; from=<kph.hunter at gmail.com>
>> <kph.hunter at gmail.com> to=<admin at ofc.mksoft.co.il>
>> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<mail-lf1-f47.google.com>
>> Oct 23 14:54:26 lab postfix/smtpd[27640]: disconnect from
>> mail-lf1-f47.google.com[209.85.167.47] ehlo=2 starttls=1 mail=1 rcpt=1
>> data=1 quit=1 commands=7
>> Oct 23 14:54:26 lab MailScanner[22102]: New Batch: Scanning 1 messages,
>> 2746 bytes
>> Oct 23 14:54:26 lab MailScanner[22102]: Virus and Content Scanning:
>> Starting
>> Oct 23 14:54:26 lab MailScanner[22102]: Spam Checks: Starting
>> Oct 23 14:54:29 lab MailScanner[22102]: Message 42fWyT5LpVz5ZLC from
>> 209.85.167.47 (kph.hunter at gmail.com) to ofc.mksoft.co.il is not spam,
>> SpamAssassin (not cached, score=0.007, required 6, autolearn=not spam,
>> DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, FREEMAIL_FROM
>> 0.00, FROM_EXCESS_BASE64 0.10, HTML_MESSAGE 0.00)
>> Oct 23 14:54:29 lab MailScanner[22102]: Delivery of nonspam: message
>> 42fWyT5LpVz5ZLC from kph.hunter at gmail.com to admin at ofc.mksoft.co.il with
>> subject test 2
>> Oct 23 14:54:29 lab MailScanner[22102]: Requeue: 42fWyT5LpVz5ZLC to
>> 42fWyY4STnz1xp6
>> Oct 23 14:54:29 lab MailScanner[22102]: Uninfected: Delivered 1 messages
>> Oct 23 14:54:29 lab MailScanner[22102]: Deleted 1 messages from
>> processing-database
>>
>>
>>
>>
>> ???? ?? ??? Shawn Iverson via MailScanner, ??24.10.2018 ???? 14:14:
>>
>> Can you share with us what you see in the log and elaborate on what is
>> missing?
>>
>> On Wed, Oct 24, 2018 at 6:45 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>>
>>> Hello all ,
>>>
>>> I am in a middle of config my mailscanner and I notice that dsn message
>>> not avail all the time.
>>>
>>> If I send virus test it does shoe dsn on the log, with simple test it
>>> does NOT.
>>>
>>>
>>> Any one please help
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>
>> --
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 option 7
>> iversons at rushville.k12.in.us
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/b9083f8d/attachment-0001.html>

From koby at mksoft.co.il  Wed Oct 24 11:44:20 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 24 Oct 2018 14:44:20 +0300
Subject: Milter No DSN
In-Reply-To: <CABu_8zK49L9-murtGJJ+c7b0ksOLBU=tv4grFqpHTvXXaXV=Dg@mail.gmail.com>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
 <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
 <CABu_8zK49L9-murtGJJ+c7b0ksOLBU=tv4grFqpHTvXXaXV=Dg@mail.gmail.com>
Message-ID: <406af08b-9ba8-b5ca-f2f2-017619672a86@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/8d666a8e/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 24 11:45:23 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 07:45:23 -0400
Subject: Milter No DSN
In-Reply-To: <406af08b-9ba8-b5ca-f2f2-017619672a86@mksoft.co.il>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
 <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
 <CABu_8zK49L9-murtGJJ+c7b0ksOLBU=tv4grFqpHTvXXaXV=Dg@mail.gmail.com>
 <406af08b-9ba8-b5ca-f2f2-017619672a86@mksoft.co.il>
Message-ID: <CABu_8zJM4K=6UmrPVqeJ0U6JSo9yQ8i=BSyUkkSnN9ttgChbdg@mail.gmail.com>

Good, and the directory is empty, correct?



On Wed, Oct 24, 2018 at 7:44 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Outgoing Queue Dir = /var/spool/MailScanner/milterout
>
> Outgoing Queue Dir
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/6f6bb2de/attachment.html>

From koby at mksoft.co.il  Wed Oct 24 11:52:24 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Wed, 24 Oct 2018 14:52:24 +0300
Subject: Milter No DSN
In-Reply-To: <CABu_8zJM4K=6UmrPVqeJ0U6JSo9yQ8i=BSyUkkSnN9ttgChbdg@mail.gmail.com>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
 <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
 <CABu_8zK49L9-murtGJJ+c7b0ksOLBU=tv4grFqpHTvXXaXV=Dg@mail.gmail.com>
 <406af08b-9ba8-b5ca-f2f2-017619672a86@mksoft.co.il>
 <CABu_8zJM4K=6UmrPVqeJ0U6JSo9yQ8i=BSyUkkSnN9ttgChbdg@mail.gmail.com>
Message-ID: <bf63c306-b198-01d3-17a5-c9723c0b7d54@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/4e7d2dc1/attachment.html>

From iversons at rushville.k12.in.us  Wed Oct 24 12:01:34 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 08:01:34 -0400
Subject: Milter No DSN
In-Reply-To: <bf63c306-b198-01d3-17a5-c9723c0b7d54@mksoft.co.il>
References: <7a920bae-8493-f440-383d-72d9d19b4e50@mksoft.co.il>
 <CABu_8z+m1EtPbrp=18JW1RXufVpGo02Ap5GY8XZgXEXZo0QcsA@mail.gmail.com>
 <bbf00054-ba70-16fe-f57e-02d76332ed1a@mksoft.co.il>
 <CABu_8zLYGobEfUjvOum+ZMy6Qf6Xkh=-6BkZ3f3wWQiY3V6A_g@mail.gmail.com>
 <7d62be48-d367-40ac-61cc-bb5aeb25a301@mksoft.co.il>
 <CABu_8zK49L9-murtGJJ+c7b0ksOLBU=tv4grFqpHTvXXaXV=Dg@mail.gmail.com>
 <406af08b-9ba8-b5ca-f2f2-017619672a86@mksoft.co.il>
 <CABu_8zJM4K=6UmrPVqeJ0U6JSo9yQ8i=BSyUkkSnN9ttgChbdg@mail.gmail.com>
 <bf63c306-b198-01d3-17a5-c9723c0b7d54@mksoft.co.il>
Message-ID: <CABu_8zKUgmCXLhKnh3WmhgbRs+XJBC67iYSqT1xygNXjiqGz+g@mail.gmail.com>

Well, this is odd. Postfix is responsible for generating DSNs, not
MailScanner, though.  MailScanner hands off the scanned messages using
SMTP, so it should appear in the log, like this.  You should see a
connection from localhost and the subsequent DSN.  If messages are in fact
being delivered, this must be actually happening, but I'm not sure why your
postfix is not logging the conversation.

Oct 24 07:48:19 smtp postfix/smtpd[13692]: connect from localhost[127.0.0.1]
Oct 24 07:48:19 smtp postfix/smtpd[13692]: AE3F760BBE79:
client=localhost[127.0.0.1]
Oct 24 07:48:19 smtp postfix/cleanup[13695]: AE3F760BBE79: message-id=<
CACg3fsZhkXt1r8QHCg6FNH-cTVw4BmF9TpCJWWo9PcBLw_dhKQ at mail.example.com>
Oct 24 07:48:19 smtp postfix/smtpd[13692]: disconnect from
localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Oct 24 07:48:19 smtp postfix/qmgr[2774]: AE3F760BBE79: from=<
shawniverson at example.com>, size=3317, nrcpt=1 (queue active)
Oct 24 07:48:19 smtp postfix/smtp[13728]: AE3F760BBE79: to=<
shawniverson at example.org>, relay=10.1.0.43[10.1.0.43]:25, delay=0.36,
delays=0.25/0.03/0.04/0.04, dsn=2.0.0, status=sent (250 OK
id=1gFHe7-0005Md-Ra)



On Wed, Oct 24, 2018 at 7:52 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> yes,
>
>
> Good, and the directory is empty, correct?
>
>
>
> On Wed, Oct 24, 2018 at 7:44 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>> Outgoing Queue Dir = /var/spool/MailScanner/milterout
>>
>> Outgoing Queue Dir
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/135c3f36/attachment.html>

From nerijus at users.sourceforge.net  Wed Oct 24 12:38:21 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Wed, 24 Oct 2018 15:38:21 +0300
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
References: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-10157-20181024-153821.00@nerijus.sat.lt>

On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> https://www.mailscanner.info/

Could you please change download links in https://www.mailscanner.info/downloads/
from https://github.com/MailScanner/v5/blob/master/builds/MailScanner-5.1.2-1.rhel.tar.gz
to https://github.com/MailScanner/v5/raw/master/builds/MailScanner-5.1.2-1.rhel.tar.gz
?

Regards,
Nerijus

From jerry.benton at mailborder.com  Wed Oct 24 12:41:59 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 24 Oct 2018 08:41:59 -0400
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <Mahogany-0.68.0-10157-20181024-153821.00@nerijus.sat.lt>
References: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
 <Mahogany-0.68.0-10157-20181024-153821.00@nerijus.sat.lt>
Message-ID: <045a01d46b96$f558f020$e00ad060$@mailborder.com>

Hmmm ... thought it was working.... 


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-----Original Message-----
From: MailScanner
<mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> On
Behalf Of Nerijus Baliunas
Sent: Wednesday, October 24, 2018 08:38
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner 5.1.2-1 Now Available

On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner
<mailscanner at lists.mailscanner.info> wrote:

> https://www.mailscanner.info/

Could you please change download links in
https://www.mailscanner.info/downloads/
from
https://github.com/MailScanner/v5/blob/master/builds/MailScanner-5.1.2-1.rhe
l.tar.gz
to
https://github.com/MailScanner/v5/raw/master/builds/MailScanner-5.1.2-1.rhel
.tar.gz
?

Regards,
Nerijus


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5530 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/5358f59a/attachment.bin>

From belle at bazuin.nl  Wed Oct 24 12:50:18 2018
From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=)
Date: Wed, 24 Oct 2018 14:50:18 +0200
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <045a01d46b96$f558f020$e00ad060$@mailborder.com>
References: <Mahogany-0.68.0-10157-20181024-153821.00@nerijus.sat.lt>
Message-ID: <vmime.5bd06a8a.7ffe.3e162dc62217222a@ms249-lin-003.rotterdam.bazuin.nl>

Same for the debian/ubuntu package.  

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: MailScanner 
> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.
> info] Namens Jerry Benton
> Verzonden: woensdag 24 oktober 2018 14:42
> Aan: 'MailScanner Discussion'
> Onderwerp: RE: MailScanner 5.1.2-1 Now Available
> 
> Hmmm ... thought it was working.... 
> 
> 
> --
> Jerry Benton
> www.mailborder.com
> +1   (843) 800-8605
> +44 (020) 3883-8605
> 
> 
> -----Original Message-----
> From: MailScanner
> <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailsca
> nner.info> On
> Behalf Of Nerijus Baliunas
> Sent: Wednesday, October 24, 2018 08:38
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner 5.1.2-1 Now Available
> 
> On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner
> <mailscanner at lists.mailscanner.info> wrote:
> 
> > https://www.mailscanner.info/
> 
> Could you please change download links in
> https://www.mailscanner.info/downloads/
> from
> https://github.com/MailScanner/v5/blob/master/builds/MailScann
> er-5.1.2-1.rhe
> l.tar.gz
> to
> https://github.com/MailScanner/v5/raw/master/builds/MailScanne
> r-5.1.2-1.rhel
> .tar.gz
> ?
> 
> Regards,
> Nerijus
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 


From jerry.benton at mailborder.com  Wed Oct 24 12:55:29 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 24 Oct 2018 08:55:29 -0400
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <vmime.5bd06a8a.7ffe.3e162dc62217222a@ms249-lin-003.rotterdam.bazuin.nl>
References: <Mahogany-0.68.0-10157-20181024-153821.00@nerijus.sat.lt>
 <vmime.5bd06a8a.7ffe.3e162dc62217222a@ms249-lin-003.rotterdam.bazuin.nl>
Message-ID: <047601d46b98$d7a2d1c0$86e87540$@mailborder.com>

Ok, done. 


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-----Original Message-----
From: MailScanner
<mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> On
Behalf Of L.P.H. van Belle via MailScanner
Sent: Wednesday, October 24, 2018 08:50
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Cc: L.P.H. van Belle <belle at bazuin.nl>
Subject: RE: MailScanner 5.1.2-1 Now Available

Same for the debian/ubuntu package.  

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: MailScanner 
> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.
> info] Namens Jerry Benton
> Verzonden: woensdag 24 oktober 2018 14:42
> Aan: 'MailScanner Discussion'
> Onderwerp: RE: MailScanner 5.1.2-1 Now Available
> 
> Hmmm ... thought it was working.... 
> 
> 
> --
> Jerry Benton
> www.mailborder.com
> +1   (843) 800-8605
> +44 (020) 3883-8605
> 
> 
> -----Original Message-----
> From: MailScanner
> <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailsca
> nner.info> On
> Behalf Of Nerijus Baliunas
> Sent: Wednesday, October 24, 2018 08:38
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner 5.1.2-1 Now Available
> 
> On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner
> <mailscanner at lists.mailscanner.info> wrote:
> 
> > https://www.mailscanner.info/
> 
> Could you please change download links in
> https://www.mailscanner.info/downloads/
> from
> https://github.com/MailScanner/v5/blob/master/builds/MailScann
> er-5.1.2-1.rhe
> l.tar.gz
> to
> https://github.com/MailScanner/v5/raw/master/builds/MailScanne
> r-5.1.2-1.rhel
> .tar.gz
> ?
> 
> Regards,
> Nerijus
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5530 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/7ca768b6/attachment.bin>

From nerijus at users.sourceforge.net  Wed Oct 24 13:28:53 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Wed, 24 Oct 2018 16:28:53 +0300
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
References: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-10157-20181024-162853.01@nerijus.sat.lt>

On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> https://www.mailscanner.info/

I updated rpm by running rpm -Fvh, and after that my /etc/MailScanner/MailScanner.conf.orig
and MailScanner.conf.diff files are gone. I assume rpm post install script did that - it updates
MailScanner.conf. But why it deletes MailScanner.conf.orig and MailScanner.conf.diff?

Regards,
Nerijus

From iversons at rushville.k12.in.us  Wed Oct 24 13:32:16 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Wed, 24 Oct 2018 09:32:16 -0400
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <Mahogany-0.68.0-10157-20181024-162853.01@nerijus.sat.lt>
References: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
 <Mahogany-0.68.0-10157-20181024-162853.01@nerijus.sat.lt>
Message-ID: <CABu_8z+TmbzdQQbtKN6b0aTLJVCh+2u6+O7yZ1D=YGGWUK=OOw@mail.gmail.com>

You should find them in your home directory in the backup folder that the
rpm creates.

On Wed, Oct 24, 2018 at 9:30 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner <
> mailscanner at lists.mailscanner.info> wrote:
>
> > https://www.mailscanner.info/
>
> I updated rpm by running rpm -Fvh, and after that my
> /etc/MailScanner/MailScanner.conf.orig
> and MailScanner.conf.diff files are gone. I assume rpm post install script
> did that - it updates
> MailScanner.conf. But why it deletes MailScanner.conf.orig and
> MailScanner.conf.diff?
>
> Regards,
> Nerijus
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181024/21cfda50/attachment.html>

From nerijus at users.sourceforge.net  Wed Oct 24 15:10:13 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Wed, 24 Oct 2018 18:10:13 +0300
Subject: MailScanner 5.1.2-1 Now Available
In-Reply-To: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
References: <CABu_8zKFTuVtZ7-8Aa7rW6YDVoX3RTMnfEzTDxvMadVeU6D_gQ@mail.gmail.com>
Message-ID: <Mahogany-0.68.0-10157-20181024-181013.01@nerijus.sat.lt>

On Wed, 24 Oct 2018 07:36:28 -0400 Shawn Iverson via MailScanner <mailscanner at lists.mailscanner.info> wrote:

> https://www.mailscanner.info/

Not a big deal probably, but the new virus.scanners.conf does not have newline at end of file.

Regards,
Nerijus

From koby at mksoft.co.il  Thu Oct 25 07:16:51 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 10:16:51 +0300
Subject: MailScanner 5.1.2 not working
Message-ID: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/7164b942/attachment.html>

From Conz at B0x.nl  Thu Oct 25 07:36:01 2018
From: Conz at B0x.nl (Conz)
Date: Thu, 25 Oct 2018 09:36:01 +0200
Subject: MailScanner 5.1.2 not working
In-Reply-To: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
Message-ID: <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>

Is there anything in the maillog ?

Is your MTA delivering the emails or just keeping them in the hold queue ?


*usually* when MS stops picking up new messages it means it cannot 
access the mail queue (permissions) or is looking in the wrong location.




On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>
> Hello All ,
>
> Since my upgrade to 5.1.2 (yesterday) my mailscanner stop function 
> (not scanning)
>
> I did not change my? mailscanner.conf which run as a milter
>
>
>
> Here is the load process :
>
>
> postfix?? 4628???? 1? 0 Oct20 ???????? 00:00:00 MailScanner: starting 
> child
> postfix?? 5740???? 1? 0 16:10 ???????? 00:00:00 MSMilter Daemon
> postfix?? 5744? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
> postfix?? 5745? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
> postfix?? 5746? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
> postfix?? 5747? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
> postfix?? 5748? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
> postfix?? 7309? 2463? 0 16:26 ???????? 00:00:00 anvil -l -t unix -u -c
> root????? 7784? 7464? 0 16:39 pts/1??? 00:00:00 grep --color=auto post*
> postfix? 22102? 4628? 0 13:07 ???????? 00:00:34 MailScanner: waiting 
> for messages
> postfix? 28635? 2463? 0 13:46 ???????? 00:00:00 qmgr -l -t unix -u
> postfix? 30060? 2463? 0 15:32 ???????? 00:00:00 pickup -l -t unix -u -c
> postfix? 30150? 2463? 0 15:36 ???????? 00:00:00 tlsmgr -l -t unix -u -c
> postfix? 30775? 4628? 0 15:41 ???????? 00:00:34 MailScanner: waiting 
> for messages
>
>
>
> It is seen that some thing went wrong
>
>
> Any clue...
>
>
> Koby Peleg Hen
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/d095e625/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 08:46:02 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 11:46:02 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
Message-ID: <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/21f27164/attachment.html>

From iversons at rushville.k12.in.us  Thu Oct 25 10:33:40 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 06:33:40 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
Message-ID: <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>

Hello Koby,

It looks like the milter is functioning fine.  We need to focus on
MailScanner itself.  The next step would be for MailScanner to pick up the
messages and scan them.

With Debug on, what do you see in the log when your run
"/usr/sbin/MailScanner" one time?



On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> I fix all permission on /Mailscanner  > chown -R  postfix:mtagroup
>
>
> But ,
>
> It is seems that all the mail stuck in the /var/spool/mailscanner/milterin
>
> They are not send out to target...
>
>
> here is the log from debug
>
>
> Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from mail.mksoft.co.il
> [199.203.52.126]
> Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip = 199.203.52.126
> Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received: from
> mail.mksoft.co.il
> Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
> Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no client
> certificate requested
> Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id = 42ggYm3nHjz4TLC
> datestring = Thu, 25 Oct 2018 11:40:28 +0300 (IDT)
> Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068: client=
> mail.mksoft.co.il[199.203.52.126]
> Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068: message-id=
> <0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
> <0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scannermode = yes
> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
> admin at ofc.mksoft.co.il
> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip = 199.203.52.126
> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id = 42ggYm3nHjz4TLC
> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
> /var/spool/MailScanner/milterin
> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
> /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
> >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scanner mode enabled
> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no whitelist match,
> proceeding to blacklist test
> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of Header detected
> Oct 25 11:40:29 lab MSMilter[9849]: body_callback: incoming =
> /var/spool/MailScanner/milterin
> Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
> /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
> >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
> /var/spool/MailScanner/milterin
> Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068: milter-discard:
> END-OF-MESSAGE from mail.mksoft.co.il[199.203.52.126]: milter triggers
> DISCARD a
> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
> mail.mksoft.co.il>
>
>
>
>
>
> ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
>
> Is there anything in the maillog ?
>
> Is your MTA delivering the emails or just keeping them in the hold queue ?
>
>
> *usually* when MS stops picking up new messages it means it cannot access
> the mail queue (permissions) or is looking in the wrong location.
>
>
>
>
> On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>
> Hello All ,
>
> Since my upgrade to 5.1.2 (yesterday) my mailscanner stop function (not
> scanning)
>
> I did not change my  mailscanner.conf which run as a milter
>
>
>
> Here is the load process :
>
>
> postfix   4628     1  0 Oct20 ?        00:00:00 MailScanner: starting child
> postfix   5740     1  0 16:10 ?        00:00:00 MSMilter Daemon
> postfix   5744  5740  0 16:10 ?        00:00:00 MSMilter Daemon
> postfix   5745  5740  0 16:10 ?        00:00:00 MSMilter Daemon
> postfix   5746  5740  0 16:10 ?        00:00:00 MSMilter Daemon
> postfix   5747  5740  0 16:10 ?        00:00:00 MSMilter Daemon
> postfix   5748  5740  0 16:10 ?        00:00:00 MSMilter Daemon
> postfix   7309  2463  0 16:26 ?        00:00:00 anvil -l -t unix -u -c
> root      7784  7464  0 16:39 pts/1    00:00:00 grep --color=auto post*
> postfix  22102  4628  0 13:07 ?        00:00:34 MailScanner: waiting for
> messages
> postfix  28635  2463  0 13:46 ?        00:00:00 qmgr -l -t unix -u
> postfix  30060  2463  0 15:32 ?        00:00:00 pickup -l -t unix -u -c
> postfix  30150  2463  0 15:36 ?        00:00:00 tlsmgr -l -t unix -u -c
> postfix  30775  4628  0 15:41 ?        00:00:34 MailScanner: waiting for
> messages
>
>
>
> It is seen that some thing went wrong
>
>
> Any clue...
>
>
> Koby Peleg Hen
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/cf6e37ec/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 11:06:41 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 14:06:41 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
Message-ID: <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/d1f4bdc0/attachment-0001.html>

From iversons at rushville.k12.in.us  Thu Oct 25 11:19:06 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 07:19:06 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
Message-ID: <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>

Koby,

Yes, that is correct, as it should.  Did you run /usr/sbin/MailScanner with
Debug = yes ?



On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> It seem that it always
>
> do : milter triggers DISCARD
>
>
> Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC: milter-discard:
> END-OF-MESSAGE from mail.mksoft.co.il[199.203.52.126]: milter triggers
> DISCARD a
> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
> mail.mksoft.co.il>
> Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
> mail.mksoft.co.il[199.203.52.126] ehlo=1 mail=1 rcpt=1 data=1 quit=1
> commands=5
>
> Here is the full log
>
> Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip = 199.203.52.126
> Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received: from
> mail.mksoft.co.il
> Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
> Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no client
> certificate requested
> Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
> 42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300 (IDT)
> Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC: client=
> mail.mksoft.co.il[199.203.52.126]
> Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC: message-id=
> <d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
> <d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scannermode = yes
> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
> admin at ofc.mksoft.co.il
> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip = 199.203.52.126
> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id = 42gkkq6cnMz750Q
> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
> /var/spool/MailScanner/milterin
> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
> /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
> >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner mode enabled
> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no whitelist match,
> proceeding to blacklist test
> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of Header detected
> Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
> /var/spool/MailScanner/milterin
> Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
> /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
> >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
> /var/spool/MailScanner/milterin
> Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC: *milter-discard:
> END-OF-MESSAGE from mail.mksoft.co.il
> <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD *a
> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
> mail.mksoft.co.il>
> Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
> mail.mksoft.co.il[199.203.52.126] ehlo=1 mail=1 rcpt=1 data=1 quit=1
> commands=5
>
>
>
>
>
> Hello Koby,
>
> It looks like the milter is functioning fine.  We need to focus on
> MailScanner itself.  The next step would be for MailScanner to pick up the
> messages and scan them.
>
> With Debug on, what do you see in the log when your run
> "/usr/sbin/MailScanner" one time?
>
>
>
> On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>> I fix all permission on /Mailscanner  > chown -R  postfix:mtagroup
>>
>>
>> But ,
>>
>> It is seems that all the mail stuck in the /var/spool/mailscanner/milterin
>>
>> They are not send out to target...
>>
>>
>> here is the log from debug
>>
>>
>> Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from mail.mksoft.co.il
>> [199.203.52.126]
>> Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip = 199.203.52.126
>> Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received: from
>> mail.mksoft.co.il
>> Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
>> Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no client
>> certificate requested
>> Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id =
>> 42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28 +0300 (IDT)
>> Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068: client=
>> mail.mksoft.co.il[199.203.52.126]
>> Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068: message-id=
>> <0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>> <0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scannermode = yes
>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
>> admin at ofc.mksoft.co.il
>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip = 199.203.52.126
>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id = 42ggYm3nHjz4TLC
>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
>> /var/spool/MailScanner/milterin
>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
>> /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>> Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>> >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scanner mode enabled
>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no whitelist match,
>> proceeding to blacklist test
>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of Header detected
>> Oct 25 11:40:29 lab MSMilter[9849]: body_callback: incoming =
>> /var/spool/MailScanner/milterin
>> Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
>> /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>> Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>> >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
>> /var/spool/MailScanner/milterin
>> Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068: milter-discard:
>> END-OF-MESSAGE from mail.mksoft.co.il[199.203.52.126]: milter triggers
>> DISCARD a
>> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
>> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
>> mail.mksoft.co.il>
>>
>>
>>
>>
>>
>> ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
>>
>> Is there anything in the maillog ?
>>
>> Is your MTA delivering the emails or just keeping them in the hold queue ?
>>
>>
>> *usually* when MS stops picking up new messages it means it cannot access
>> the mail queue (permissions) or is looking in the wrong location.
>>
>>
>>
>>
>> On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>>
>> Hello All ,
>>
>> Since my upgrade to 5.1.2 (yesterday) my mailscanner stop function (not
>> scanning)
>>
>> I did not change my  mailscanner.conf which run as a milter
>>
>>
>>
>> Here is the load process :
>>
>>
>> postfix   4628     1  0 Oct20 ?        00:00:00 MailScanner: starting
>> child
>> postfix   5740     1  0 16:10 ?        00:00:00 MSMilter Daemon
>> postfix   5744  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>> postfix   5745  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>> postfix   5746  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>> postfix   5747  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>> postfix   5748  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>> postfix   7309  2463  0 16:26 ?        00:00:00 anvil -l -t unix -u -c
>> root      7784  7464  0 16:39 pts/1    00:00:00 grep --color=auto post*
>> postfix  22102  4628  0 13:07 ?        00:00:34 MailScanner: waiting for
>> messages
>> postfix  28635  2463  0 13:46 ?        00:00:00 qmgr -l -t unix -u
>> postfix  30060  2463  0 15:32 ?        00:00:00 pickup -l -t unix -u -c
>> postfix  30150  2463  0 15:36 ?        00:00:00 tlsmgr -l -t unix -u -c
>> postfix  30775  4628  0 15:41 ?        00:00:34 MailScanner: waiting for
>> messages
>>
>>
>>
>> It is seen that some thing went wrong
>>
>>
>> Any clue...
>>
>>
>> Koby Peleg Hen
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/938f081a/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 11:24:02 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 14:24:02 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
Message-ID: <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>

yes ,

BTW it is all started with my upgrade to 5.1.2
why it keed  DISCARD message ?


here is part of my conf...

# This is the version number of the MailScanner distribution that created
# this configuration file. Please do not change this value.
MailScanner Version Number = 5.1.2

# Do not change this unless you absolutely have to, these numbers have
# been carefully calculated.
# They affect the length of time that different types of message are
# stored in the SpamAssassin cache which can be configured earlier in
# this file (look for "Cache").
# The numbers are all set in seconds. They are:
# 1. Non-Spam cache lifetime                           = 30 minutes
# 2. Spam (low scoring) cache lifetime                 = 5 minutes
# 3. High-Scoring spam cache lifetime                  = 3 hours
# 4. Viruses cache lifetime                            = 2 days
# 5. How often to check the cache for expired messages = 10 minutes
SpamAssassin Cache Timings = 1800,300,10800,172800,600

# Set Debug to "yes" to stop it running as a daemon and just process
# one batch of messages and then exit.
Debug = yes

# Do you want to debug SpamAssassin from within MailScanner?
Debug SpamAssassin = no

# Set Run In Foreground to "yes" if you want MailScanner to operate
# normally in foreground (and not as a background daemon).
# Use this if you are controlling the execution of MailScanner
# with a tool like DJB's 'supervise' (see http://cr.yp.to/daemontools.html).
Run In Foreground = no






> Koby,
> 
> Yes, that is correct, as it should.? Did you run /usr/sbin/MailScanner 
> with Debug = yes ?
> 
> 
> 
> On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
>     It seem that it always
> 
>     do : milter triggers DISCARD
> 
> 
>     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
>     milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD a
> 
>     ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
>     to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
>     proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
>     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>     mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
>     mail=1 rcpt=1 data=1 quit=1 commands=5
> 
>     Here is the full log
> 
>     Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip =
>     199.203.52.126
>     Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received: from
>     mail.mksoft.co.il <http://mail.mksoft.co.il>
>     Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
>     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no client
>     certificate requested
>     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
>     42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300 (IDT)
>     Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC:
>     client=mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126]
>     Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC:
>     message-id=<d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
>     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scannermode = yes
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
>     admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip = 199.203.52.126
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id = 42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
>     /var/spool/MailScanner/milterin
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
>     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner mode enabled
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no whitelist
>     match, proceeding to blacklist test
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of Header
>     detected
>     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
>     /var/spool/MailScanner/milterin
>     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
>     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
>     /var/spool/MailScanner/milterin
>     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
>     *milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD *a
>     ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
>     to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
>     proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
>     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>     mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
>     mail=1 rcpt=1 data=1 quit=1 commands=5
> 
> 
> 
> 
> 
>>     Hello Koby,
>>
>>     It looks like the milter is functioning fine.? We need to focus on
>>     MailScanner itself.? The next step would be for MailScanner to
>>     pick up the messages and scan them.
>>
>>     With Debug on, what do you see in the log when your run
>>     "/usr/sbin/MailScanner" one time?
>>
>>
>>
>>     On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen <koby at mksoft.co.il
>>     <mailto:koby at mksoft.co.il>> wrote:
>>
>>         I fix all permission on /Mailscanner? > chown -R postfix:mtagroup
>>
>>
>>         But ,
>>
>>         It is seems that all the mail stuck in the
>>         /var/spool/mailscanner/milterin
>>
>>         They are not send out to target...
>>
>>
>>         here is the log from debug
>>
>>
>>         Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from
>>         mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126]
>>         Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip =
>>         199.203.52.126
>>         Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received:
>>         from mail.mksoft.co.il <http://mail.mksoft.co.il>
>>         Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
>>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no
>>         client certificate requested
>>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id =
>>         42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28 +0300 (IDT)
>>         Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068:
>>         client=mail.mksoft.co.il
>>         <http://mail.mksoft.co.il>[199.203.52.126]
>>         Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068:
>>         message-id=<0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>>         <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scannermode
>>         = yes
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
>>         admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip =
>>         199.203.52.126
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id =
>>         42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
>>         /var/spool/MailScanner/milterin
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
>>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scanner mode
>>         enabled
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no whitelist
>>         match, proceeding to blacklist test
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of
>>         Header detected
>>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: incoming =
>>         /var/spool/MailScanner/milterin
>>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
>>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
>>         /var/spool/MailScanner/milterin
>>         Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068:
>>         milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>>         <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
>>         DISCARD a
>>         ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
>>         to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
>>         proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
>>
>>
>>
>>
>>
>>         ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
>>
>>>         Is there anything in the maillog ?
>>>
>>>         Is your MTA delivering the emails or just keeping them in the
>>>         hold queue ?
>>>
>>>
>>>         *usually* when MS stops picking up new messages it means it
>>>         cannot access the mail queue (permissions) or is looking in
>>>         the wrong location.
>>>
>>>
>>>
>>>
>>>         On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>>>>
>>>>         Hello All ,
>>>>
>>>>         Since my upgrade to 5.1.2 (yesterday) my mailscanner stop
>>>>         function (not scanning)
>>>>
>>>>         I did not change my? mailscanner.conf which run as a milter
>>>>
>>>>
>>>>
>>>>         Here is the load process :
>>>>
>>>>
>>>>         postfix?? 4628???? 1? 0 Oct20 ???????? 00:00:00 MailScanner:
>>>>         starting child
>>>>         postfix?? 5740???? 1? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5744? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5745? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5746? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5747? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5748? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 7309? 2463? 0 16:26 ???????? 00:00:00 anvil -l -t
>>>>         unix -u -c
>>>>         root????? 7784? 7464? 0 16:39 pts/1??? 00:00:00 grep
>>>>         --color=auto post*
>>>>         postfix? 22102? 4628? 0 13:07 ???????? 00:00:34 MailScanner:
>>>>         waiting for messages
>>>>         postfix? 28635? 2463? 0 13:46 ???????? 00:00:00 qmgr -l -t
>>>>         unix -u
>>>>         postfix? 30060? 2463? 0 15:32 ???????? 00:00:00 pickup -l -t
>>>>         unix -u -c
>>>>         postfix? 30150? 2463? 0 15:36 ???????? 00:00:00 tlsmgr -l -t
>>>>         unix -u -c
>>>>         postfix? 30775? 4628? 0 15:41 ???????? 00:00:34 MailScanner:
>>>>         waiting for messages
>>>>
>>>>
>>>>
>>>>         It is seen that some thing went wrong
>>>>
>>>>
>>>>         Any clue...
>>>>
>>>>
>>>>         Koby Peleg Hen
>>>>
>>>>
>>>
>>
>>
>>         -- 
>>         MailScanner mailing list
>>         mailscanner at lists.mailscanner.info
>>         <mailto:mailscanner at lists.mailscanner.info>
>>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>>
>>     -- 
>>     Shawn Iverson, CETL
>>     Director of Technology
>>     Rush County Schools
>>     765-932-3901 option 7
>>     iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>>
>>
>>
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 11:23:35 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 07:23:35 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
Message-ID: <CABu_8z+61Yup7i=cZZScqGbrkxTesk1_gaAGiUPv2B=RBdLxfg@mail.gmail.com>

One issue I spotted is you have the MSMail Queue Type set to long, but it
appears that postfix is using short queue ids.

On Thu, Oct 25, 2018 at 7:19 AM Shawn Iverson <iversons at rushville.k12.in.us>
wrote:

> Koby,
>
> Yes, that is correct, as it should.  Did you run /usr/sbin/MailScanner
> with Debug = yes ?
>
>
>
> On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>> It seem that it always
>>
>> do : milter triggers DISCARD
>>
>>
>> Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC: milter-discard:
>> END-OF-MESSAGE from mail.mksoft.co.il[199.203.52.126]: milter triggers
>> DISCARD a
>> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
>> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
>> mail.mksoft.co.il>
>> Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>> mail.mksoft.co.il[199.203.52.126] ehlo=1 mail=1 rcpt=1 data=1 quit=1
>> commands=5
>>
>> Here is the full log
>>
>> Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip = 199.203.52.126
>> Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received: from
>> mail.mksoft.co.il
>> Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
>> Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no client
>> certificate requested
>> Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
>> 42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300 (IDT)
>> Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC: client=
>> mail.mksoft.co.il[199.203.52.126]
>> Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC: message-id=
>> <d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
>> <d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
>> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scannermode = yes
>> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
>> admin at ofc.mksoft.co.il
>> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip = 199.203.52.126
>> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id = 42gkkq6cnMz750Q
>> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
>> /var/spool/MailScanner/milterin
>> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
>> /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>> Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>> >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner mode enabled
>> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no whitelist match,
>> proceeding to blacklist test
>> Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of Header detected
>> Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
>> /var/spool/MailScanner/milterin
>> Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
>> /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>> Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>> >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>> Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
>> /var/spool/MailScanner/milterin
>> Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC: *milter-discard:
>> END-OF-MESSAGE from mail.mksoft.co.il
>> <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD *a
>> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
>> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
>> mail.mksoft.co.il>
>> Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>> mail.mksoft.co.il[199.203.52.126] ehlo=1 mail=1 rcpt=1 data=1 quit=1
>> commands=5
>>
>>
>>
>>
>>
>> Hello Koby,
>>
>> It looks like the milter is functioning fine.  We need to focus on
>> MailScanner itself.  The next step would be for MailScanner to pick up the
>> messages and scan them.
>>
>> With Debug on, what do you see in the log when your run
>> "/usr/sbin/MailScanner" one time?
>>
>>
>>
>> On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>>
>>> I fix all permission on /Mailscanner  > chown -R  postfix:mtagroup
>>>
>>>
>>> But ,
>>>
>>> It is seems that all the mail stuck in the
>>> /var/spool/mailscanner/milterin
>>>
>>> They are not send out to target...
>>>
>>>
>>> here is the log from debug
>>>
>>>
>>> Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from mail.mksoft.co.il
>>> [199.203.52.126]
>>> Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip = 199.203.52.126
>>> Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received: from
>>> mail.mksoft.co.il
>>> Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
>>> Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no client
>>> certificate requested
>>> Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id =
>>> 42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28 +0300 (IDT)
>>> Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068: client=
>>> mail.mksoft.co.il[199.203.52.126]
>>> Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068: message-id=
>>> <0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>>> <0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scannermode = yes
>>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
>>> admin at ofc.mksoft.co.il
>>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip = 199.203.52.126
>>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id = 42ggYm3nHjz4TLC
>>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
>>> /var/spool/MailScanner/milterin
>>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
>>> /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>> Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>>> >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scanner mode enabled
>>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no whitelist match,
>>> proceeding to blacklist test
>>> Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of Header detected
>>> Oct 25 11:40:29 lab MSMilter[9849]: body_callback: incoming =
>>> /var/spool/MailScanner/milterin
>>> Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
>>> /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>> Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>>> >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>> Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
>>> /var/spool/MailScanner/milterin
>>> Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068: milter-discard:
>>> END-OF-MESSAGE from mail.mksoft.co.il[199.203.52.126]: milter triggers
>>> DISCARD a
>>> ction; from=<koby at mksoft.co.il> <koby at mksoft.co.il> to=
>>> <admin at ofc.mksoft.co.il> <admin at ofc.mksoft.co.il> proto=ESMTP helo=<
>>> mail.mksoft.co.il>
>>>
>>>
>>>
>>>
>>>
>>> ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
>>>
>>> Is there anything in the maillog ?
>>>
>>> Is your MTA delivering the emails or just keeping them in the hold queue
>>> ?
>>>
>>>
>>> *usually* when MS stops picking up new messages it means it cannot
>>> access the mail queue (permissions) or is looking in the wrong location.
>>>
>>>
>>>
>>>
>>> On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>>>
>>> Hello All ,
>>>
>>> Since my upgrade to 5.1.2 (yesterday) my mailscanner stop function (not
>>> scanning)
>>>
>>> I did not change my  mailscanner.conf which run as a milter
>>>
>>>
>>>
>>> Here is the load process :
>>>
>>>
>>> postfix   4628     1  0 Oct20 ?        00:00:00 MailScanner: starting
>>> child
>>> postfix   5740     1  0 16:10 ?        00:00:00 MSMilter Daemon
>>> postfix   5744  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>>> postfix   5745  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>>> postfix   5746  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>>> postfix   5747  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>>> postfix   5748  5740  0 16:10 ?        00:00:00 MSMilter Daemon
>>> postfix   7309  2463  0 16:26 ?        00:00:00 anvil -l -t unix -u -c
>>> root      7784  7464  0 16:39 pts/1    00:00:00 grep --color=auto post*
>>> postfix  22102  4628  0 13:07 ?        00:00:34 MailScanner: waiting for
>>> messages
>>> postfix  28635  2463  0 13:46 ?        00:00:00 qmgr -l -t unix -u
>>> postfix  30060  2463  0 15:32 ?        00:00:00 pickup -l -t unix -u -c
>>> postfix  30150  2463  0 15:36 ?        00:00:00 tlsmgr -l -t unix -u -c
>>> postfix  30775  4628  0 15:41 ?        00:00:34 MailScanner: waiting for
>>> messages
>>>
>>>
>>>
>>> It is seen that some thing went wrong
>>>
>>>
>>> Any clue...
>>>
>>>
>>> Koby Peleg Hen
>>>
>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>
>> --
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 option 7
>> iversons at rushville.k12.in.us
>>
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/9f80da5e/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 11:26:01 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 14:26:01 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
Message-ID: <b4eb16f9-78e7-1973-a526-23799148c242@mksoft.co.il>

I am using ubuntu 18.04 so my conf file is /etc/mailscanner/conf.d/xxx.conf



???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:19:
> Koby,
> 
> Yes, that is correct, as it should.? Did you run /usr/sbin/MailScanner 
> with Debug = yes ?
> 
> 
> 
> On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
>     It seem that it always
> 
>     do : milter triggers DISCARD
> 
> 
>     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
>     milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD a
> 
>     ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
>     to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
>     proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
>     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>     mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
>     mail=1 rcpt=1 data=1 quit=1 commands=5
> 
>     Here is the full log
> 
>     Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip =
>     199.203.52.126
>     Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received: from
>     mail.mksoft.co.il <http://mail.mksoft.co.il>
>     Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
>     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no client
>     certificate requested
>     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
>     42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300 (IDT)
>     Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC:
>     client=mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126]
>     Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC:
>     message-id=<d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
>     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scannermode = yes
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
>     admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip = 199.203.52.126
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id = 42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
>     /var/spool/MailScanner/milterin
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
>     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner mode enabled
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no whitelist
>     match, proceeding to blacklist test
>     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of Header
>     detected
>     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
>     /var/spool/MailScanner/milterin
>     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
>     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
>     /var/spool/MailScanner/milterin
>     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
>     *milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD *a
>     ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
>     to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
>     proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
>     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>     mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
>     mail=1 rcpt=1 data=1 quit=1 commands=5
> 
> 
> 
> 
> 
>>     Hello Koby,
>>
>>     It looks like the milter is functioning fine.? We need to focus on
>>     MailScanner itself.? The next step would be for MailScanner to
>>     pick up the messages and scan them.
>>
>>     With Debug on, what do you see in the log when your run
>>     "/usr/sbin/MailScanner" one time?
>>
>>
>>
>>     On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen <koby at mksoft.co.il
>>     <mailto:koby at mksoft.co.il>> wrote:
>>
>>         I fix all permission on /Mailscanner? > chown -R postfix:mtagroup
>>
>>
>>         But ,
>>
>>         It is seems that all the mail stuck in the
>>         /var/spool/mailscanner/milterin
>>
>>         They are not send out to target...
>>
>>
>>         here is the log from debug
>>
>>
>>         Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from
>>         mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126]
>>         Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip =
>>         199.203.52.126
>>         Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received:
>>         from mail.mksoft.co.il <http://mail.mksoft.co.il>
>>         Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
>>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no
>>         client certificate requested
>>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id =
>>         42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28 +0300 (IDT)
>>         Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068:
>>         client=mail.mksoft.co.il
>>         <http://mail.mksoft.co.il>[199.203.52.126]
>>         Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068:
>>         message-id=<0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>>         <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scannermode
>>         = yes
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
>>         admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip =
>>         199.203.52.126
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id =
>>         42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
>>         /var/spool/MailScanner/milterin
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
>>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scanner mode
>>         enabled
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no whitelist
>>         match, proceeding to blacklist test
>>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of
>>         Header detected
>>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: incoming =
>>         /var/spool/MailScanner/milterin
>>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
>>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
>>         /var/spool/MailScanner/milterin
>>         Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068:
>>         milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>>         <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
>>         DISCARD a
>>         ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
>>         to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
>>         proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
>>
>>
>>
>>
>>
>>         ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
>>
>>>         Is there anything in the maillog ?
>>>
>>>         Is your MTA delivering the emails or just keeping them in the
>>>         hold queue ?
>>>
>>>
>>>         *usually* when MS stops picking up new messages it means it
>>>         cannot access the mail queue (permissions) or is looking in
>>>         the wrong location.
>>>
>>>
>>>
>>>
>>>         On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>>>>
>>>>         Hello All ,
>>>>
>>>>         Since my upgrade to 5.1.2 (yesterday) my mailscanner stop
>>>>         function (not scanning)
>>>>
>>>>         I did not change my? mailscanner.conf which run as a milter
>>>>
>>>>
>>>>
>>>>         Here is the load process :
>>>>
>>>>
>>>>         postfix?? 4628???? 1? 0 Oct20 ???????? 00:00:00 MailScanner:
>>>>         starting child
>>>>         postfix?? 5740???? 1? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5744? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5745? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5746? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5747? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 5748? 5740? 0 16:10 ???????? 00:00:00 MSMilter Daemon
>>>>         postfix?? 7309? 2463? 0 16:26 ???????? 00:00:00 anvil -l -t
>>>>         unix -u -c
>>>>         root????? 7784? 7464? 0 16:39 pts/1??? 00:00:00 grep
>>>>         --color=auto post*
>>>>         postfix? 22102? 4628? 0 13:07 ???????? 00:00:34 MailScanner:
>>>>         waiting for messages
>>>>         postfix? 28635? 2463? 0 13:46 ???????? 00:00:00 qmgr -l -t
>>>>         unix -u
>>>>         postfix? 30060? 2463? 0 15:32 ???????? 00:00:00 pickup -l -t
>>>>         unix -u -c
>>>>         postfix? 30150? 2463? 0 15:36 ???????? 00:00:00 tlsmgr -l -t
>>>>         unix -u -c
>>>>         postfix? 30775? 4628? 0 15:41 ???????? 00:00:34 MailScanner:
>>>>         waiting for messages
>>>>
>>>>
>>>>
>>>>         It is seen that some thing went wrong
>>>>
>>>>
>>>>         Any clue...
>>>>
>>>>
>>>>         Koby Peleg Hen
>>>>
>>>>
>>>
>>
>>
>>         -- 
>>         MailScanner mailing list
>>         mailscanner at lists.mailscanner.info
>>         <mailto:mailscanner at lists.mailscanner.info>
>>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>>
>>     -- 
>>     Shawn Iverson, CETL
>>     Director of Technology
>>     Rush County Schools
>>     765-932-3901 option 7
>>     iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>>
>>
>>
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 11:26:44 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 07:26:44 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
Message-ID: <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>

DISCARD instructs postfix to silently drop the message without a REJECT.
This is required so that MailScanner can proceed with scanning.

Did you also try setting Debug = no and starting MailScanner?

On Thu, Oct 25, 2018 at 7:24 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> yes ,
>
> BTW it is all started with my upgrade to 5.1.2
> why it keed  DISCARD message ?
>
>
> here is part of my conf...
>
> # This is the version number of the MailScanner distribution that created
> # this configuration file. Please do not change this value.
> MailScanner Version Number = 5.1.2
>
> # Do not change this unless you absolutely have to, these numbers have
> # been carefully calculated.
> # They affect the length of time that different types of message are
> # stored in the SpamAssassin cache which can be configured earlier in
> # this file (look for "Cache").
> # The numbers are all set in seconds. They are:
> # 1. Non-Spam cache lifetime                           = 30 minutes
> # 2. Spam (low scoring) cache lifetime                 = 5 minutes
> # 3. High-Scoring spam cache lifetime                  = 3 hours
> # 4. Viruses cache lifetime                            = 2 days
> # 5. How often to check the cache for expired messages = 10 minutes
> SpamAssassin Cache Timings = 1800,300,10800,172800,600
>
> # Set Debug to "yes" to stop it running as a daemon and just process
> # one batch of messages and then exit.
> Debug = yes
>
> # Do you want to debug SpamAssassin from within MailScanner?
> Debug SpamAssassin = no
>
> # Set Run In Foreground to "yes" if you want MailScanner to operate
> # normally in foreground (and not as a background daemon).
> # Use this if you are controlling the execution of MailScanner
> # with a tool like DJB's 'supervise' (see http://cr.yp.to/daemontools.html
> ).
> Run In Foreground = no
>
>
>
>
>
>
> > Koby,
> >
> > Yes, that is correct, as it should.  Did you run /usr/sbin/MailScanner
> > with Debug = yes ?
> >
> >
> >
> > On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il
> > <mailto:koby at mksoft.co.il>> wrote:
> >
> >     It seem that it always
> >
> >     do : milter triggers DISCARD
> >
> >
> >     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
> >     milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
> >     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD
> a
> >
> >     ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
> >     to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
> >     proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
> >     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
> >     mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
> >     mail=1 rcpt=1 data=1 quit=1 commands=5
> >
> >     Here is the full log
> >
> >     Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip =
> >     199.203.52.126
> >     Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received: from
> >     mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
> >     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no client
> >     certificate requested
> >     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
> >     42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300 (IDT)
> >     Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC:
> >     client=mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126]
> >     Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC:
> >     message-id=<d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
> >     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>
> >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scannermode = yes
> >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
> >     admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
> >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip =
> 199.203.52.126
> >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id =
> 42gkkq6cnMz750Q
> >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
> >     /var/spool/MailScanner/milterin
> >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
> >     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
> >      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner mode
> enabled
> >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no whitelist
> >     match, proceeding to blacklist test
> >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of Header
> >     detected
> >     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
> >     /var/spool/MailScanner/milterin
> >     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
> >     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
> >      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
> >     /var/spool/MailScanner/milterin
> >     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
> >     *milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
> >     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers DISCARD
> *a
> >     ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
> >     to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
> >     proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
> >     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
> >     mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
> >     mail=1 rcpt=1 data=1 quit=1 commands=5
> >
> >
> >
> >
> >
> >>     Hello Koby,
> >>
> >>     It looks like the milter is functioning fine.  We need to focus on
> >>     MailScanner itself.  The next step would be for MailScanner to
> >>     pick up the messages and scan them.
> >>
> >>     With Debug on, what do you see in the log when your run
> >>     "/usr/sbin/MailScanner" one time?
> >>
> >>
> >>
> >>     On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen <koby at mksoft.co.il
> >>     <mailto:koby at mksoft.co.il>> wrote:
> >>
> >>         I fix all permission on /Mailscanner  > chown -R
> postfix:mtagroup
> >>
> >>
> >>         But ,
> >>
> >>         It is seems that all the mail stuck in the
> >>         /var/spool/mailscanner/milterin
> >>
> >>         They are not send out to target...
> >>
> >>
> >>         here is the log from debug
> >>
> >>
> >>         Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from
> >>         mail.mksoft.co.il <http://mail.mksoft.co.il>[199.203.52.126]
> >>         Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip =
> >>         199.203.52.126
> >>         Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received:
> >>         from mail.mksoft.co.il <http://mail.mksoft.co.il>
> >>         Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
> >>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no
> >>         client certificate requested
> >>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id =
> >>         42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28 +0300
> (IDT)
> >>         Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068:
> >>         client=mail.mksoft.co.il
> >>         <http://mail.mksoft.co.il>[199.203.52.126]
> >>         Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068:
> >>         message-id=<0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
> >>         <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scannermode
> >>         = yes
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
> >>         admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip =
> >>         199.203.52.126
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id =
> >>         42ggYm3nHjz4TLC
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
> >>         /var/spool/MailScanner/milterin
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
> >>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
> >>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: scanner mode
> >>         enabled
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no whitelist
> >>         match, proceeding to blacklist test
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of
> >>         Header detected
> >>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: incoming =
> >>         /var/spool/MailScanner/milterin
> >>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
> >>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
> >>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
> >>         /var/spool/MailScanner/milterin
> >>         Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068:
> >>         milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
> >>         <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
> >>         DISCARD a
> >>         ction; from=<koby at mksoft.co.il> <mailto:koby at mksoft.co.il>
> >>         to=<admin at ofc.mksoft.co.il> <mailto:admin at ofc.mksoft.co.il>
> >>         proto=ESMTP helo=<mail.mksoft.co.il <http://mail.mksoft.co.il>>
> >>
> >>
> >>
> >>
> >>
> >>         ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
> >>
> >>>         Is there anything in the maillog ?
> >>>
> >>>         Is your MTA delivering the emails or just keeping them in the
> >>>         hold queue ?
> >>>
> >>>
> >>>         *usually* when MS stops picking up new messages it means it
> >>>         cannot access the mail queue (permissions) or is looking in
> >>>         the wrong location.
> >>>
> >>>
> >>>
> >>>
> >>>         On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
> >>>>
> >>>>         Hello All ,
> >>>>
> >>>>         Since my upgrade to 5.1.2 (yesterday) my mailscanner stop
> >>>>         function (not scanning)
> >>>>
> >>>>         I did not change my  mailscanner.conf which run as a milter
> >>>>
> >>>>
> >>>>
> >>>>         Here is the load process :
> >>>>
> >>>>
> >>>>         postfix   4628     1  0 Oct20 ?        00:00:00 MailScanner:
> >>>>         starting child
> >>>>         postfix   5740     1  0 16:10 ?        00:00:00 MSMilter
> Daemon
> >>>>         postfix   5744  5740  0 16:10 ?        00:00:00 MSMilter
> Daemon
> >>>>         postfix   5745  5740  0 16:10 ?        00:00:00 MSMilter
> Daemon
> >>>>         postfix   5746  5740  0 16:10 ?        00:00:00 MSMilter
> Daemon
> >>>>         postfix   5747  5740  0 16:10 ?        00:00:00 MSMilter
> Daemon
> >>>>         postfix   5748  5740  0 16:10 ?        00:00:00 MSMilter
> Daemon
> >>>>         postfix   7309  2463  0 16:26 ?        00:00:00 anvil -l -t
> >>>>         unix -u -c
> >>>>         root      7784  7464  0 16:39 pts/1    00:00:00 grep
> >>>>         --color=auto post*
> >>>>         postfix  22102  4628  0 13:07 ?        00:00:34 MailScanner:
> >>>>         waiting for messages
> >>>>         postfix  28635  2463  0 13:46 ?        00:00:00 qmgr -l -t
> >>>>         unix -u
> >>>>         postfix  30060  2463  0 15:32 ?        00:00:00 pickup -l -t
> >>>>         unix -u -c
> >>>>         postfix  30150  2463  0 15:36 ?        00:00:00 tlsmgr -l -t
> >>>>         unix -u -c
> >>>>         postfix  30775  4628  0 15:41 ?        00:00:34 MailScanner:
> >>>>         waiting for messages
> >>>>
> >>>>
> >>>>
> >>>>         It is seen that some thing went wrong
> >>>>
> >>>>
> >>>>         Any clue...
> >>>>
> >>>>
> >>>>         Koby Peleg Hen
> >>>>
> >>>>
> >>>
> >>
> >>
> >>         --
> >>         MailScanner mailing list
> >>         mailscanner at lists.mailscanner.info
> >>         <mailto:mailscanner at lists.mailscanner.info>
> >>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >>
> >>
> >>     --
> >>     Shawn Iverson, CETL
> >>     Director of Technology
> >>     Rush County Schools
> >>     765-932-3901 option 7
> >>     iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >>
> >>
> >>
> >
> >
> >     --
> >     MailScanner mailing list
> >     mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > Shawn Iverson, CETL
> > Director of Technology
> > Rush County Schools
> > 765-932-3901 option 7
> > iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/1bd5ef73/attachment-0001.html>

From koby at mksoft.co.il  Thu Oct 25 11:38:22 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 14:38:22 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
Message-ID: <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>

yes , try that with no lack.
I did restart my vm and stil the same.

Note : there is no log of MailScanner appear in the log file which is 
/var/log/mail.log.

There is any major diff between 5.1.1 and 5.1.2 regards the 
MailScanner.conf ?






???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:26:
> DISCARD instructs postfix to silently drop the message without a 
> REJECT.? This is required so that MailScanner can proceed with scanning.
> 
> Did you also try setting Debug = no and starting MailScanner?
> 
> On Thu, Oct 25, 2018 at 7:24 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
>     yes ,
> 
>     BTW it is all started with my upgrade to 5.1.2
>     why it keed? DISCARD message ?
> 
> 
>     here is part of my conf...
> 
>     # This is the version number of the MailScanner distribution that
>     created
>     # this configuration file. Please do not change this value.
>     MailScanner Version Number = 5.1.2
> 
>     # Do not change this unless you absolutely have to, these numbers have
>     # been carefully calculated.
>     # They affect the length of time that different types of message are
>     # stored in the SpamAssassin cache which can be configured earlier in
>     # this file (look for "Cache").
>     # The numbers are all set in seconds. They are:
>     # 1. Non-Spam cache lifetime? ? ? ? ? ? ? ? ? ? ? ? ? ?= 30 minutes
>     # 2. Spam (low scoring) cache lifetime? ? ? ? ? ? ? ? ?= 5 minutes
>     # 3. High-Scoring spam cache lifetime? ? ? ? ? ? ? ? ? = 3 hours
>     # 4. Viruses cache lifetime? ? ? ? ? ? ? ? ? ? ? ? ? ? = 2 days
>     # 5. How often to check the cache for expired messages = 10 minutes
>     SpamAssassin Cache Timings = 1800,300,10800,172800,600
> 
>     # Set Debug to "yes" to stop it running as a daemon and just process
>     # one batch of messages and then exit.
>     Debug = yes
> 
>     # Do you want to debug SpamAssassin from within MailScanner?
>     Debug SpamAssassin = no
> 
>     # Set Run In Foreground to "yes" if you want MailScanner to operate
>     # normally in foreground (and not as a background daemon).
>     # Use this if you are controlling the execution of MailScanner
>     # with a tool like DJB's 'supervise' (see
>     http://cr.yp.to/daemontools.html).
>     Run In Foreground = no
> 
> 
> 
> 
> 
> 
>      > Koby,
>      >
>      > Yes, that is correct, as it should.? Did you run
>     /usr/sbin/MailScanner
>      > with Debug = yes ?
>      >
>      >
>      >
>      > On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>
>      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
>      >
>      >? ? ?It seem that it always
>      >
>      >? ? ?do : milter triggers DISCARD
>      >
>      >
>      >? ? ?Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
>      >? ? ?milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>
>      >? ? ?<http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
>     DISCARD a
>      >
>      >? ? ?ction; from=<koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>      >? ? ?to=<admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
>     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
>      >? ? ?proto=ESMTP helo=<mail.mksoft.co.il
>     <http://mail.mksoft.co.il> <http://mail.mksoft.co.il>>
>      >? ? ?Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>      > mail.mksoft.co.il <http://mail.mksoft.co.il>
>     <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
>      >? ? ?mail=1 rcpt=1 data=1 quit=1 commands=5
>      >
>      >? ? ?Here is the full log
>      >
>      >? ? ?Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip =
>      >? ? ?199.203.52.126
>      >? ? ?Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received:
>     from
>      > mail.mksoft.co.il <http://mail.mksoft.co.il>
>     <http://mail.mksoft.co.il>
>      >? ? ?Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
>      >? ? ?Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no client
>      >? ? ?certificate requested
>      >? ? ?Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
>      >? ? ?42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300
>     (IDT)
>      >? ? ?Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC:
>      >? ? ?client=mail.mksoft.co.il <http://mail.mksoft.co.il>
>     <http://mail.mksoft.co.il>[199.203.52.126]
>      >? ? ?Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC:
>      >? ? ?message-id=<d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il
>     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>>
>      >? ? ?<mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il
>     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>>
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eom_callback:
>     scannermode = yes
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
>      > admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
>     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip =
>     199.203.52.126
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id =
>     42gkkq6cnMz750Q
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
>      >? ? ?/var/spool/MailScanner/milterin
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
>      >? ? ?/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>      >? ? ? >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner
>     mode enabled
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no whitelist
>      >? ? ?match, proceeding to blacklist test
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of Header
>      >? ? ?detected
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
>      >? ? ?/var/spool/MailScanner/milterin
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
>      >? ? ?/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
>      >? ? ? >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
>      >? ? ?Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
>      >? ? ?/var/spool/MailScanner/milterin
>      >? ? ?Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
>      >? ? ?*milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>
>      >? ? ?<http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
>     DISCARD *a
>      >? ? ?ction; from=<koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>      >? ? ?to=<admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
>     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
>      >? ? ?proto=ESMTP helo=<mail.mksoft.co.il
>     <http://mail.mksoft.co.il> <http://mail.mksoft.co.il>>
>      >? ? ?Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
>      > mail.mksoft.co.il <http://mail.mksoft.co.il>
>     <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
>      >? ? ?mail=1 rcpt=1 data=1 quit=1 commands=5
>      >
>      >
>      >
>      >
>      >
>      >>? ? ?Hello Koby,
>      >>
>      >>? ? ?It looks like the milter is functioning fine.? We need to
>     focus on
>      >>? ? ?MailScanner itself.? The next step would be for MailScanner to
>      >>? ? ?pick up the messages and scan them.
>      >>
>      >>? ? ?With Debug on, what do you see in the log when your run
>      >>? ? ?"/usr/sbin/MailScanner" one time?
>      >>
>      >>
>      >>
>      >>? ? ?On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen
>     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>      >>? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
>      >>
>      >>? ? ? ? ?I fix all permission on /Mailscanner? > chown -R
>     postfix:mtagroup
>      >>
>      >>
>      >>? ? ? ? ?But ,
>      >>
>      >>? ? ? ? ?It is seems that all the mail stuck in the
>      >>? ? ? ? ?/var/spool/mailscanner/milterin
>      >>
>      >>? ? ? ? ?They are not send out to target...
>      >>
>      >>
>      >>? ? ? ? ?here is the log from debug
>      >>
>      >>
>      >>? ? ? ? ?Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from
>      >> mail.mksoft.co.il <http://mail.mksoft.co.il>
>     <http://mail.mksoft.co.il>[199.203.52.126]
>      >>? ? ? ? ?Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip =
>      >>? ? ? ? ?199.203.52.126
>      >>? ? ? ? ?Oct 25 11:40:28 lab MSMilter[9849]: helo_callback: Received:
>      >>? ? ? ? ?from mail.mksoft.co.il <http://mail.mksoft.co.il>
>     <http://mail.mksoft.co.il>
>      >>? ? ? ? ?Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype = long
>      >>? ? ? ? ?Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no
>      >>? ? ? ? ?client certificate requested
>      >>? ? ? ? ?Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id =
>      >>? ? ? ? ?42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28
>     +0300 (IDT)
>      >>? ? ? ? ?Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068:
>      >>? ? ? ? ?client=mail.mksoft.co.il <http://mail.mksoft.co.il>
>      >>? ? ? ? ?<http://mail.mksoft.co.il>[199.203.52.126]
>      >>? ? ? ? ?Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068:
>      >>       
>      ?message-id=<0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il
>     <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>>
>      >>       
>      ?<mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il
>     <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>>
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eom_callback:
>     scannermode
>      >>? ? ? ? ?= yes
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
>      >> admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
>     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip =
>      >>? ? ? ? ?199.203.52.126
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id =
>      >>? ? ? ? ?42ggYm3nHjz4TLC
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: incoming =
>      >>? ? ? ? ?/var/spool/MailScanner/milterin
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
>      >>? ? ? ? ?/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>      >>? ? ? ? ?>>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eom_callback:
>     scanner mode
>      >>? ? ? ? ?enabled
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no
>     whitelist
>      >>? ? ? ? ?match, proceeding to blacklist test
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of
>      >>? ? ? ? ?Header detected
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: body_callback:
>     incoming =
>      >>? ? ? ? ?/var/spool/MailScanner/milterin
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
>      >>? ? ? ? ?/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool file
>      >>? ? ? ? ?>>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
>      >>? ? ? ? ?Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: incoming =
>      >>? ? ? ? ?/var/spool/MailScanner/milterin
>      >>? ? ? ? ?Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068:
>      >>? ? ? ? ?milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
>     <http://mail.mksoft.co.il>
>      >>? ? ? ? ?<http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
>      >>? ? ? ? ?DISCARD a
>      >>? ? ? ? ?ction; from=<koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>> <mailto:koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>>
>      >>? ? ? ? ?to=<admin at ofc.mksoft.co.il
>     <mailto:admin at ofc.mksoft.co.il>> <mailto:admin at ofc.mksoft.co.il
>     <mailto:admin at ofc.mksoft.co.il>>
>      >>? ? ? ? ?proto=ESMTP helo=<mail.mksoft.co.il
>     <http://mail.mksoft.co.il> <http://mail.mksoft.co.il>>
>      >>
>      >>
>      >>
>      >>
>      >>
>      >>? ? ? ? ????? ?? ??? Conz, ??25.10.2018 ???? 10:36:
>      >>
>      >>>? ? ? ? ?Is there anything in the maillog ?
>      >>>
>      >>>? ? ? ? ?Is your MTA delivering the emails or just keeping them
>     in the
>      >>>? ? ? ? ?hold queue ?
>      >>>
>      >>>
>      >>>? ? ? ? ?*usually* when MS stops picking up new messages it means it
>      >>>? ? ? ? ?cannot access the mail queue (permissions) or is looking in
>      >>>? ? ? ? ?the wrong location.
>      >>>
>      >>>
>      >>>
>      >>>
>      >>>? ? ? ? ?On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
>      >>>>
>      >>>>? ? ? ? ?Hello All ,
>      >>>>
>      >>>>? ? ? ? ?Since my upgrade to 5.1.2 (yesterday) my mailscanner stop
>      >>>>? ? ? ? ?function (not scanning)
>      >>>>
>      >>>>? ? ? ? ?I did not change my? mailscanner.conf which run as a
>     milter
>      >>>>
>      >>>>
>      >>>>
>      >>>>? ? ? ? ?Here is the load process :
>      >>>>
>      >>>>
>      >>>>? ? ? ? ?postfix?? 4628???? 1? 0 Oct20 ???????? 00:00:00
>     MailScanner:
>      >>>>? ? ? ? ?starting child
>      >>>>? ? ? ? ?postfix?? 5740???? 1? 0 16:10 ???????? 00:00:00
>     MSMilter Daemon
>      >>>>? ? ? ? ?postfix?? 5744? 5740? 0 16:10 ???????? 00:00:00
>     MSMilter Daemon
>      >>>>? ? ? ? ?postfix?? 5745? 5740? 0 16:10 ???????? 00:00:00
>     MSMilter Daemon
>      >>>>? ? ? ? ?postfix?? 5746? 5740? 0 16:10 ???????? 00:00:00
>     MSMilter Daemon
>      >>>>? ? ? ? ?postfix?? 5747? 5740? 0 16:10 ???????? 00:00:00
>     MSMilter Daemon
>      >>>>? ? ? ? ?postfix?? 5748? 5740? 0 16:10 ???????? 00:00:00
>     MSMilter Daemon
>      >>>>? ? ? ? ?postfix?? 7309? 2463? 0 16:26 ???????? 00:00:00 anvil
>     -l -t
>      >>>>? ? ? ? ?unix -u -c
>      >>>>? ? ? ? ?root????? 7784? 7464? 0 16:39 pts/1??? 00:00:00 grep
>      >>>>? ? ? ? ?--color=auto post*
>      >>>>? ? ? ? ?postfix? 22102? 4628? 0 13:07 ???????? 00:00:34
>     MailScanner:
>      >>>>? ? ? ? ?waiting for messages
>      >>>>? ? ? ? ?postfix? 28635? 2463? 0 13:46 ???????? 00:00:00 qmgr -l -t
>      >>>>? ? ? ? ?unix -u
>      >>>>? ? ? ? ?postfix? 30060? 2463? 0 15:32 ???????? 00:00:00 pickup
>     -l -t
>      >>>>? ? ? ? ?unix -u -c
>      >>>>? ? ? ? ?postfix? 30150? 2463? 0 15:36 ???????? 00:00:00 tlsmgr
>     -l -t
>      >>>>? ? ? ? ?unix -u -c
>      >>>>? ? ? ? ?postfix? 30775? 4628? 0 15:41 ???????? 00:00:34
>     MailScanner:
>      >>>>? ? ? ? ?waiting for messages
>      >>>>
>      >>>>
>      >>>>
>      >>>>? ? ? ? ?It is seen that some thing went wrong
>      >>>>
>      >>>>
>      >>>>? ? ? ? ?Any clue...
>      >>>>
>      >>>>
>      >>>>? ? ? ? ?Koby Peleg Hen
>      >>>>
>      >>>>
>      >>>
>      >>
>      >>
>      >>? ? ? ? ?--
>      >>? ? ? ? ?MailScanner mailing list
>      >> mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >>? ? ? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >>
>      >>
>      >>
>      >>? ? ?--
>      >>? ? ?Shawn Iverson, CETL
>      >>? ? ?Director of Technology
>      >>? ? ?Rush County Schools
>      >>? ? ?765-932-3901 option 7
>      >> iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>     <mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >>
>      >>
>      >>
>      >
>      >
>      >? ? ?--
>      >? ? ?MailScanner mailing list
>      > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >
>      >
>      >
>      > --
>      > Shawn Iverson, CETL
>      > Director of Technology
>      > Rush County Schools
>      > 765-932-3901 option 7
>      > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>     <mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >
>      >
>      >
>      >
>      >
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 11:40:52 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 07:40:52 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
Message-ID: <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>

No changes should have happened in MailScanner.conf from 5.1.1 to 5.1.2.

Do you see any errors in the system logs?  Is MailScanner starting and then
just stopping?

What do you see when you run "systemctl status mailscanner -l" ?



On Thu, Oct 25, 2018 at 7:38 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> yes , try that with no lack.
> I did restart my vm and stil the same.
>
> Note : there is no log of MailScanner appear in the log file which is
> /var/log/mail.log.
>
> There is any major diff between 5.1.1 and 5.1.2 regards the
> MailScanner.conf ?
>
>
>
>
>
>
> ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:26:
> > DISCARD instructs postfix to silently drop the message without a
> > REJECT.  This is required so that MailScanner can proceed with scanning.
> >
> > Did you also try setting Debug = no and starting MailScanner?
> >
> > On Thu, Oct 25, 2018 at 7:24 AM Koby Peleg Hen <koby at mksoft.co.il
> > <mailto:koby at mksoft.co.il>> wrote:
> >
> >     yes ,
> >
> >     BTW it is all started with my upgrade to 5.1.2
> >     why it keed  DISCARD message ?
> >
> >
> >     here is part of my conf...
> >
> >     # This is the version number of the MailScanner distribution that
> >     created
> >     # this configuration file. Please do not change this value.
> >     MailScanner Version Number = 5.1.2
> >
> >     # Do not change this unless you absolutely have to, these numbers
> have
> >     # been carefully calculated.
> >     # They affect the length of time that different types of message are
> >     # stored in the SpamAssassin cache which can be configured earlier in
> >     # this file (look for "Cache").
> >     # The numbers are all set in seconds. They are:
> >     # 1. Non-Spam cache lifetime                           = 30 minutes
> >     # 2. Spam (low scoring) cache lifetime                 = 5 minutes
> >     # 3. High-Scoring spam cache lifetime                  = 3 hours
> >     # 4. Viruses cache lifetime                            = 2 days
> >     # 5. How often to check the cache for expired messages = 10 minutes
> >     SpamAssassin Cache Timings = 1800,300,10800,172800,600
> >
> >     # Set Debug to "yes" to stop it running as a daemon and just process
> >     # one batch of messages and then exit.
> >     Debug = yes
> >
> >     # Do you want to debug SpamAssassin from within MailScanner?
> >     Debug SpamAssassin = no
> >
> >     # Set Run In Foreground to "yes" if you want MailScanner to operate
> >     # normally in foreground (and not as a background daemon).
> >     # Use this if you are controlling the execution of MailScanner
> >     # with a tool like DJB's 'supervise' (see
> >     http://cr.yp.to/daemontools.html).
> >     Run In Foreground = no
> >
> >
> >
> >
> >
> >
> >      > Koby,
> >      >
> >      > Yes, that is correct, as it should.  Did you run
> >     /usr/sbin/MailScanner
> >      > with Debug = yes ?
> >      >
> >      >
> >      >
> >      > On Thu, Oct 25, 2018 at 7:06 AM Koby Peleg Hen <koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>
> >      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
> >      >
> >      >     It seem that it always
> >      >
> >      >     do : milter triggers DISCARD
> >      >
> >      >
> >      >     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
> >      >     milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
> >     <http://mail.mksoft.co.il>
> >      >     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
> >     DISCARD a
> >      >
> >      >     ction; from=<koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >      >     to=<admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
> >     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
> >      >     proto=ESMTP helo=<mail.mksoft.co.il
> >     <http://mail.mksoft.co.il> <http://mail.mksoft.co.il>>
> >      >     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
> >      > mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
> >      >     mail=1 rcpt=1 data=1 quit=1 commands=5
> >      >
> >      >     Here is the full log
> >      >
> >      >     Oct 25 14:03:31 lab MSMilter[23469]: connect_callback: ip =
> >      >     199.203.52.126
> >      >     Oct 25 14:03:31 lab MSMilter[23469]: helo_callback: Received:
> >     from
> >      > mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     <http://mail.mksoft.co.il>
> >      >     Oct 25 14:03:31 lab MSMilter[23469]: msmailqueuetype = long
> >      >     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: no
> client
> >      >     certificate requested
> >      >     Oct 25 14:03:31 lab MSMilter[23469]: envrcpt_callback: id =
> >      >     42gkkq6cnMz750Q datestring = Thu, 25 Oct 2018 14:03:31 +0300
> >     (IDT)
> >      >     Oct 25 14:03:31 lab postfix/smtpd[23484]: E4206419CC:
> >      >     client=mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     <http://mail.mksoft.co.il>[199.203.52.126]
> >      >     Oct 25 14:03:31 lab postfix/cleanup[23487]: E4206419CC:
> >      >     message-id=<d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il
> >     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>>
> >      >     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il
> >     <mailto:d0577bf9-22b8-f8ea-2525-16ca68a7b62e at mksoft.co.il>>
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback:
> >     scannermode = yes
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: to =
> >      > admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
> >     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: ip =
> >     199.203.52.126
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: id =
> >     42gkkq6cnMz750Q
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: incoming =
> >      >     /var/spool/MailScanner/milterin
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: file =
> >      >     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
> >      >      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: scanner
> >     mode enabled
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: no
> whitelist
> >      >     match, proceeding to blacklist test
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eoh_callback: End of
> Header
> >      >     detected
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: incoming =
> >      >     /var/spool/MailScanner/milterin
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: body_callback: file =
> >      >     /var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: Not locking spool file
> >      >      >>/var/spool/MailScanner/milterin/temp-42gkkq6cnMz750Q
> >      >     Oct 25 14:03:32 lab MSMilter[23469]: eom_callback: incoming =
> >      >     /var/spool/MailScanner/milterin
> >      >     Oct 25 14:03:32 lab postfix/cleanup[23487]: E4206419CC:
> >      >     *milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
> >     <http://mail.mksoft.co.il>
> >      >     <http://mail.mksoft.co.il>[199.203.52.126]: milter triggers
> >     DISCARD *a
> >      >     ction; from=<koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >      >     to=<admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
> >     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
> >      >     proto=ESMTP helo=<mail.mksoft.co.il
> >     <http://mail.mksoft.co.il> <http://mail.mksoft.co.il>>
> >      >     Oct 25 14:03:32 lab postfix/smtpd[23484]: disconnect from
> >      > mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     <http://mail.mksoft.co.il>[199.203.52.126] ehlo=1
> >      >     mail=1 rcpt=1 data=1 quit=1 commands=5
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >>     Hello Koby,
> >      >>
> >      >>     It looks like the milter is functioning fine.  We need to
> >     focus on
> >      >>     MailScanner itself.  The next step would be for MailScanner
> to
> >      >>     pick up the messages and scan them.
> >      >>
> >      >>     With Debug on, what do you see in the log when your run
> >      >>     "/usr/sbin/MailScanner" one time?
> >      >>
> >      >>
> >      >>
> >      >>     On Thu, Oct 25, 2018 at 4:46 AM Koby Peleg Hen
> >     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >      >>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>
> wrote:
> >      >>
> >      >>         I fix all permission on /Mailscanner  > chown -R
> >     postfix:mtagroup
> >      >>
> >      >>
> >      >>         But ,
> >      >>
> >      >>         It is seems that all the mail stuck in the
> >      >>         /var/spool/mailscanner/milterin
> >      >>
> >      >>         They are not send out to target...
> >      >>
> >      >>
> >      >>         here is the log from debug
> >      >>
> >      >>
> >      >>         Oct 25 11:40:28 lab postfix/smtpd[10203]: connect from
> >      >> mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     <http://mail.mksoft.co.il>[199.203.52.126]
> >      >>         Oct 25 11:40:28 lab MSMilter[9849]: connect_callback: ip
> =
> >      >>         199.203.52.126
> >      >>         Oct 25 11:40:28 lab MSMilter[9849]: helo_callback:
> Received:
> >      >>         from mail.mksoft.co.il <http://mail.mksoft.co.il>
> >     <http://mail.mksoft.co.il>
> >      >>         Oct 25 11:40:28 lab MSMilter[9849]: msmailqueuetype =
> long
> >      >>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: no
> >      >>         client certificate requested
> >      >>         Oct 25 11:40:28 lab MSMilter[9849]: envrcpt_callback: id
> =
> >      >>         42ggYm3nHjz4TLC datestring = Thu, 25 Oct 2018 11:40:28
> >     +0300 (IDT)
> >      >>         Oct 25 11:40:28 lab postfix/smtpd[10203]: 841DE40068:
> >      >>         client=mail.mksoft.co.il <http://mail.mksoft.co.il>
> >      >>         <http://mail.mksoft.co.il>[199.203.52.126]
> >      >>         Oct 25 11:40:28 lab postfix/cleanup[10206]: 841DE40068:
> >      >>
> >       message-id=<0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il
> >     <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>>
> >      >>
> >       <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il
> >     <mailto:0f84b726-ba58-998c-175e-73f5763034f6 at mksoft.co.il>>
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback:
> >     scannermode
> >      >>         = yes
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: to =
> >      >> admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>
> >     <mailto:admin at ofc.mksoft.co.il <mailto:admin at ofc.mksoft.co.il>>
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: ip =
> >      >>         199.203.52.126
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: id =
> >      >>         42ggYm3nHjz4TLC
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback:
> incoming =
> >      >>         /var/spool/MailScanner/milterin
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: file =
> >      >>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool
> file
> >      >>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback:
> >     scanner mode
> >      >>         enabled
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback: no
> >     whitelist
> >      >>         match, proceeding to blacklist test
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eoh_callback: End of
> >      >>         Header detected
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback:
> >     incoming =
> >      >>         /var/spool/MailScanner/milterin
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: body_callback: file =
> >      >>         /var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: Not locking spool
> file
> >      >>         >>/var/spool/MailScanner/milterin/temp-42ggYm3nHjz4TLC
> >      >>         Oct 25 11:40:29 lab MSMilter[9849]: eom_callback:
> incoming =
> >      >>         /var/spool/MailScanner/milterin
> >      >>         Oct 25 11:40:29 lab postfix/cleanup[10206]: 841DE40068:
> >      >>         milter-discard: END-OF-MESSAGE from mail.mksoft.co.il
> >     <http://mail.mksoft.co.il>
> >      >>         <http://mail.mksoft.co.il>[199.203.52.126]: milter
> triggers
> >      >>         DISCARD a
> >      >>         ction; from=<koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>> <mailto:koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>>
> >      >>         to=<admin at ofc.mksoft.co.il
> >     <mailto:admin at ofc.mksoft.co.il>> <mailto:admin at ofc.mksoft.co.il
> >     <mailto:admin at ofc.mksoft.co.il>>
> >      >>         proto=ESMTP helo=<mail.mksoft.co.il
> >     <http://mail.mksoft.co.il> <http://mail.mksoft.co.il>>
> >      >>
> >      >>
> >      >>
> >      >>
> >      >>
> >      >>         ???? ?? ??? Conz, ??25.10.2018 ???? 10:36:
> >      >>
> >      >>>         Is there anything in the maillog ?
> >      >>>
> >      >>>         Is your MTA delivering the emails or just keeping them
> >     in the
> >      >>>         hold queue ?
> >      >>>
> >      >>>
> >      >>>         *usually* when MS stops picking up new messages it
> means it
> >      >>>         cannot access the mail queue (permissions) or is
> looking in
> >      >>>         the wrong location.
> >      >>>
> >      >>>
> >      >>>
> >      >>>
> >      >>>         On 10/25/18 9:16 AM, Koby Peleg Hen wrote:
> >      >>>>
> >      >>>>         Hello All ,
> >      >>>>
> >      >>>>         Since my upgrade to 5.1.2 (yesterday) my mailscanner
> stop
> >      >>>>         function (not scanning)
> >      >>>>
> >      >>>>         I did not change my  mailscanner.conf which run as a
> >     milter
> >      >>>>
> >      >>>>
> >      >>>>
> >      >>>>         Here is the load process :
> >      >>>>
> >      >>>>
> >      >>>>         postfix   4628     1  0 Oct20 ?        00:00:00
> >     MailScanner:
> >      >>>>         starting child
> >      >>>>         postfix   5740     1  0 16:10 ?        00:00:00
> >     MSMilter Daemon
> >      >>>>         postfix   5744  5740  0 16:10 ?        00:00:00
> >     MSMilter Daemon
> >      >>>>         postfix   5745  5740  0 16:10 ?        00:00:00
> >     MSMilter Daemon
> >      >>>>         postfix   5746  5740  0 16:10 ?        00:00:00
> >     MSMilter Daemon
> >      >>>>         postfix   5747  5740  0 16:10 ?        00:00:00
> >     MSMilter Daemon
> >      >>>>         postfix   5748  5740  0 16:10 ?        00:00:00
> >     MSMilter Daemon
> >      >>>>         postfix   7309  2463  0 16:26 ?        00:00:00 anvil
> >     -l -t
> >      >>>>         unix -u -c
> >      >>>>         root      7784  7464  0 16:39 pts/1    00:00:00 grep
> >      >>>>         --color=auto post*
> >      >>>>         postfix  22102  4628  0 13:07 ?        00:00:34
> >     MailScanner:
> >      >>>>         waiting for messages
> >      >>>>         postfix  28635  2463  0 13:46 ?        00:00:00 qmgr
> -l -t
> >      >>>>         unix -u
> >      >>>>         postfix  30060  2463  0 15:32 ?        00:00:00 pickup
> >     -l -t
> >      >>>>         unix -u -c
> >      >>>>         postfix  30150  2463  0 15:36 ?        00:00:00 tlsmgr
> >     -l -t
> >      >>>>         unix -u -c
> >      >>>>         postfix  30775  4628  0 15:41 ?        00:00:34
> >     MailScanner:
> >      >>>>         waiting for messages
> >      >>>>
> >      >>>>
> >      >>>>
> >      >>>>         It is seen that some thing went wrong
> >      >>>>
> >      >>>>
> >      >>>>         Any clue...
> >      >>>>
> >      >>>>
> >      >>>>         Koby Peleg Hen
> >      >>>>
> >      >>>>
> >      >>>
> >      >>
> >      >>
> >      >>         --
> >      >>         MailScanner mailing list
> >      >> mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >>         <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >>
> >      >>
> >      >>
> >      >>     --
> >      >>     Shawn Iverson, CETL
> >      >>     Director of Technology
> >      >>     Rush County Schools
> >      >>     765-932-3901 option 7
> >      >> iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >>
> >      >>
> >      >>
> >      >
> >      >
> >      >     --
> >      >     MailScanner mailing list
> >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >
> >      >
> >      >
> >      > --
> >      > Shawn Iverson, CETL
> >      > Director of Technology
> >      > Rush County Schools
> >      > 765-932-3901 option 7
> >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >
> >      >
> >      >
> >      >
> >      >
> >
> >
> >     --
> >     MailScanner mailing list
> >     mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > Shawn Iverson, CETL
> > Director of Technology
> > Rush County Schools
> > 765-932-3901 option 7
> > iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/71aaaf0a/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 11:46:16 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 14:46:16 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
Message-ID: <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>


? mailscanner.service - LSB: MSMilter daemon
    Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
vendor preset: enabled)
    Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
      Docs: man:systemd-sysv-generator(8)
   Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
(code=exited, status=0/SUCCESS)
   Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
(code=exited, status=0/SUCCESS)
  Main PID: 2492 (MSMilter Daemon)
     Tasks: 6 (limit: 2319)
    CGroup: /system.slice/mailscanner.service
            ??2492 MSMilter Daemon
            ??2496 MSMilter Daemon
            ??2497 MSMilter Daemon
            ??2498 MSMilter Daemon
            ??2499 MSMilter Daemon
            ??2500 MSMilter Daemon

Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Reading configuration 
file /etc/MailScanner/conf.d/SmgMailScanner.conf
Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
configuration file /etc/MailScanner/conf.d/README before, skipping.
Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before, 
skipping.
Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Could not read 
directory /var/spool/MailScanner/incoming/Locks
Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Error in configuration 
file line 3103, directory /var/spool/MailScanner/incoming/Locks for 
lockfiledir does not exist (or is not readable)
Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 1500 hostnames 
from the phishing whitelist
Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 16624 hostnames 
from the phishing blacklists
Oct 25 14:44:43 lab.mksoft.co.il root[2494]: MSMilter started
Oct 25 14:44:44 lab.mksoft.co.il msmilter-init[2383]: MSMilter started 
with process id 2492
Oct 25 14:44:44 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.

From iversons at rushville.k12.in.us  Thu Oct 25 11:56:08 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 07:56:08 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
Message-ID: <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>

Something is not right here.  mailscanner.service should not be pointing to
msmilter-init

Try this....

sudo systemctl stop mailscanner.service
sudo systemctl stop msmilter.service
sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
/lib/systemd/system/mailscanner.service
sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
/lib/systemd/system/msmilter.service
sudo systemctl daemon-reload
sudo systemctl enable mailscanner.service
sudo systemctl enable msmilter.service
sudo systemctl start mailscanner.service
sudo systemctl start msmilter.service







On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

>
> ? mailscanner.service - LSB: MSMilter daemon
>     Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
> vendor preset: enabled)
>     Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
>       Docs: man:systemd-sysv-generator(8)
>    Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> (code=exited, status=0/SUCCESS)
>    Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init start
> (code=exited, status=0/SUCCESS)
>   Main PID: 2492 (MSMilter Daemon)
>      Tasks: 6 (limit: 2319)
>     CGroup: /system.slice/mailscanner.service
>             ??2492 MSMilter Daemon
>             ??2496 MSMilter Daemon
>             ??2497 MSMilter Daemon
>             ??2498 MSMilter Daemon
>             ??2499 MSMilter Daemon
>             ??2500 MSMilter Daemon
>
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Reading configuration
> file /etc/MailScanner/conf.d/SmgMailScanner.conf
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/README before, skipping.
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> skipping.
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Could not read
> directory /var/spool/MailScanner/incoming/Locks
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Error in configuration
> file line 3103, directory /var/spool/MailScanner/incoming/Locks for
> lockfiledir does not exist (or is not readable)
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 1500 hostnames
> from the phishing whitelist
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 16624 hostnames
> from the phishing blacklists
> Oct 25 14:44:43 lab.mksoft.co.il root[2494]: MSMilter started
> Oct 25 14:44:44 lab.mksoft.co.il msmilter-init[2383]: MSMilter started
> with process id 2492
> Oct 25 14:44:44 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/e05232f7/attachment-0001.html>

From koby at mksoft.co.il  Thu Oct 25 11:57:31 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 14:57:31 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
Message-ID: <5b2263e6-88ea-db9a-3956-125806b3313f@mksoft.co.il>

I thing I found some thing,
there is no file name Locks under the following dir 
/var/spool/MailScanner/incoming
so I added it and now no error.
root at lab:/var/spool/MailScanner/incoming# systemctl status mailscanner -l
? mailscanner.service - LSB: MSMilter daemon
    Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
vendor preset: enabled)
    Active: active (running) since Thu 2018-10-25 14:53:17 IDT; 3min 9s ago
      Docs: man:systemd-sysv-generator(8)
   Process: 2672 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
(code=exited, status=0/SUCCESS)
   Process: 2689 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
(code=exited, status=0/SUCCESS)
  Main PID: 2706 (MSMilter Daemon)
     Tasks: 6 (limit: 2319)
    CGroup: /system.slice/mailscanner.service
            ??2706 MSMilter Daemon
            ??2710 MSMilter Daemon
            ??2711 MSMilter Daemon
            ??2712 MSMilter Daemon
            ??2713 MSMilter Daemon
            ??2714 MSMilter Daemon

But still no scannig...








???? ?? ??? Koby Peleg Hen, ??25.10.2018 ???? 14:46:
> 
> ? mailscanner.service - LSB: MSMilter daemon
>  ?? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
> vendor preset: enabled)
>  ?? Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
>  ???? Docs: man:systemd-sysv-generator(8)
>  ? Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
> (code=exited, status=0/SUCCESS)
>  ? Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
> (code=exited, status=0/SUCCESS)
>  ?Main PID: 2492 (MSMilter Daemon)
>  ??? Tasks: 6 (limit: 2319)
>  ?? CGroup: /system.slice/mailscanner.service
>  ?????????? ??2492 MSMilter Daemon
>  ?????????? ??2496 MSMilter Daemon
>  ?????????? ??2497 MSMilter Daemon
>  ?????????? ??2498 MSMilter Daemon
>  ?????????? ??2499 MSMilter Daemon
>  ?????????? ??2500 MSMilter Daemon
> 
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Reading configuration 
> file /etc/MailScanner/conf.d/SmgMailScanner.conf
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
> configuration file /etc/MailScanner/conf.d/README before, skipping.
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before, 
> skipping.
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Could not read 
> directory /var/spool/MailScanner/incoming/Locks
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Error in configuration 
> file line 3103, directory /var/spool/MailScanner/incoming/Locks for 
> lockfiledir does not exist (or is not readable)
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 1500 hostnames 
> from the phishing whitelist
> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 16624 hostnames 
> from the phishing blacklists
> Oct 25 14:44:43 lab.mksoft.co.il root[2494]: MSMilter started
> Oct 25 14:44:44 lab.mksoft.co.il msmilter-init[2383]: MSMilter started 
> with process id 2492
> Oct 25 14:44:44 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.
> 
> 

From koby at mksoft.co.il  Thu Oct 25 12:02:35 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 15:02:35 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
Message-ID: <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>

I did that and thsi is the output.

? mailscanner.service - LSB: MSMilter daemon
    Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
vendor preset: enabled)
    Active: active (running) since Thu 2018-10-25 15:00:41 IDT; 16s ago
      Docs: man:systemd-sysv-generator(8)
   Process: 2970 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
(code=exited, status=0/SUCCESS)
  Main PID: 2988 (MSMilter Daemon)
     Tasks: 6 (limit: 2319)
    CGroup: /system.slice/mailscanner.service
            ??2988 MSMilter Daemon
            ??2992 MSMilter Daemon
            ??2993 MSMilter Daemon
            ??2994 MSMilter Daemon
            ??2995 MSMilter Daemon
            ??2996 MSMilter Daemon

Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Reading configuration 
file /etc/MailScanner/conf.d/README
Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Reading configuration 
file /etc/MailScanner/conf.d/SmgMailScanner.conf
Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Configuration: Seen 
configuration file /etc/MailScanner/conf.d/README before, skipping.
Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Configuration: Seen 
configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before, 
skipping.
Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Value of lockfiledir 
cannot be a ruleset, only a simple value
Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Read 1500 hostnames 
from the phishing whitelist
Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Read 16624 hostnames 
from the phishing blacklists
Oct 25 15:00:40 lab.mksoft.co.il root[2989]: MSMilter started
Oct 25 15:00:41 lab.mksoft.co.il msmilter-init[2970]: MSMilter started 
with process id 2988
Oct 25 15:00:41 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.

Is it Ok now ?







???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:56:
> Something is not right here.? mailscanner.service should not be pointing 
> to msmilter-init
> 
> Try this....
> 
> sudo systemctl stop mailscanner.service
> sudo systemctl stop msmilter.service
> sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd 
> /lib/systemd/system/mailscanner.service
> sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter 
> /lib/systemd/system/msmilter.service
> sudo systemctl daemon-reload
> sudo systemctl enable mailscanner.service
> sudo systemctl enable msmilter.service
> sudo systemctl start mailscanner.service
> sudo systemctl start msmilter.service
> 
> 
> 
> 
> 
> 
> 
> On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
> 
>     ? mailscanner.service - LSB: MSMilter daemon
>      ? ? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
>     vendor preset: enabled)
>      ? ? Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
>      ? ? ? Docs: man:systemd-sysv-generator(8)
>      ? ?Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
>     (code=exited, status=0/SUCCESS)
>      ? ?Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init
>     start
>     (code=exited, status=0/SUCCESS)
>      ? Main PID: 2492 (MSMilter Daemon)
>      ? ? ?Tasks: 6 (limit: 2319)
>      ? ? CGroup: /system.slice/mailscanner.service
>      ? ? ? ? ? ? ??2492 MSMilter Daemon
>      ? ? ? ? ? ? ??2496 MSMilter Daemon
>      ? ? ? ? ? ? ??2497 MSMilter Daemon
>      ? ? ? ? ? ? ??2498 MSMilter Daemon
>      ? ? ? ? ? ? ??2499 MSMilter Daemon
>      ? ? ? ? ? ? ??2500 MSMilter Daemon
> 
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Reading configuration
>     file /etc/MailScanner/conf.d/SmgMailScanner.conf
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Configuration: Seen
>     configuration file /etc/MailScanner/conf.d/README before, skipping.
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Configuration: Seen
>     configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
>     skipping.
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Could not read
>     directory /var/spool/MailScanner/incoming/Locks
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Error in configuration
>     file line 3103, directory /var/spool/MailScanner/incoming/Locks for
>     lockfiledir does not exist (or is not readable)
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Read 1500 hostnames
>     from the phishing whitelist
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2396]: Read 16624 hostnames
>     from the phishing blacklists
>     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     root[2494]: MSMilter started
>     Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     msmilter-init[2383]: MSMilter started
>     with process id 2492
>     Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     systemd[1]: Started LSB: MSMilter daemon.
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 12:08:44 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 08:08:44 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
Message-ID: <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>

Negative.

We better try again, with fresh copies...

sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
curl
https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd
| sudo tee /usr/lib/MailScanner/systemd/ms-systemd
curl
https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter
| sudo tee /usr/lib/MailScanner/systemd/ms-milter
sudo systemctl stop mailscanner.service
sudo systemctl stop msmilter.service
sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
/lib/systemd/system/mailscanner.service
sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
/lib/systemd/system/msmilter.service
sudo systemctl daemon-reload
sudo systemctl enable mailscanner.service
sudo systemctl enable msmilter.service
sudo systemctl start mailscanner.service
sudo systemctl start msmilter.service

On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> I did that and thsi is the output.
>
> ? mailscanner.service - LSB: MSMilter daemon
>     Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
> vendor preset: enabled)
>     Active: active (running) since Thu 2018-10-25 15:00:41 IDT; 16s ago
>       Docs: man:systemd-sysv-generator(8)
>    Process: 2970 ExecStart=/usr/lib/MailScanner/init/msmilter-init start
> (code=exited, status=0/SUCCESS)
>   Main PID: 2988 (MSMilter Daemon)
>      Tasks: 6 (limit: 2319)
>     CGroup: /system.slice/mailscanner.service
>             ??2988 MSMilter Daemon
>             ??2992 MSMilter Daemon
>             ??2993 MSMilter Daemon
>             ??2994 MSMilter Daemon
>             ??2995 MSMilter Daemon
>             ??2996 MSMilter Daemon
>
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Reading configuration
> file /etc/MailScanner/conf.d/README
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Reading configuration
> file /etc/MailScanner/conf.d/SmgMailScanner.conf
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/README before, skipping.
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> skipping.
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Value of lockfiledir
> cannot be a ruleset, only a simple value
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Read 1500 hostnames
> from the phishing whitelist
> Oct 25 15:00:40 lab.mksoft.co.il MSMilter[2983]: Read 16624 hostnames
> from the phishing blacklists
> Oct 25 15:00:40 lab.mksoft.co.il root[2989]: MSMilter started
> Oct 25 15:00:41 lab.mksoft.co.il msmilter-init[2970]: MSMilter started
> with process id 2988
> Oct 25 15:00:41 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.
>
> Is it Ok now ?
>
>
>
>
>
>
>
> ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:56:
> > Something is not right here.  mailscanner.service should not be pointing
> > to msmilter-init
> >
> > Try this....
> >
> > sudo systemctl stop mailscanner.service
> > sudo systemctl stop msmilter.service
> > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> > /lib/systemd/system/mailscanner.service
> > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> > /lib/systemd/system/msmilter.service
> > sudo systemctl daemon-reload
> > sudo systemctl enable mailscanner.service
> > sudo systemctl enable msmilter.service
> > sudo systemctl start mailscanner.service
> > sudo systemctl start msmilter.service
> >
> >
> >
> >
> >
> >
> >
> > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen <koby at mksoft.co.il
> > <mailto:koby at mksoft.co.il>> wrote:
> >
> >
> >     ? mailscanner.service - LSB: MSMilter daemon
> >          Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
> enabled;
> >     vendor preset: enabled)
> >          Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s
> ago
> >            Docs: man:systemd-sysv-generator(8)
> >         Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init
> stop
> >     (code=exited, status=0/SUCCESS)
> >         Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >     start
> >     (code=exited, status=0/SUCCESS)
> >        Main PID: 2492 (MSMilter Daemon)
> >           Tasks: 6 (limit: 2319)
> >          CGroup: /system.slice/mailscanner.service
> >                  ??2492 MSMilter Daemon
> >                  ??2496 MSMilter Daemon
> >                  ??2497 MSMilter Daemon
> >                  ??2498 MSMilter Daemon
> >                  ??2499 MSMilter Daemon
> >                  ??2500 MSMilter Daemon
> >
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Reading configuration
> >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Configuration: Seen
> >     configuration file /etc/MailScanner/conf.d/README before, skipping.
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Configuration: Seen
> >     configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf
> before,
> >     skipping.
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Could not read
> >     directory /var/spool/MailScanner/incoming/Locks
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Error in configuration
> >     file line 3103, directory /var/spool/MailScanner/incoming/Locks for
> >     lockfiledir does not exist (or is not readable)
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Read 1500 hostnames
> >     from the phishing whitelist
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2396]: Read 16624 hostnames
> >     from the phishing blacklists
> >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     root[2494]: MSMilter started
> >     Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     msmilter-init[2383]: MSMilter started
> >     with process id 2492
> >     Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     systemd[1]: Started LSB: MSMilter daemon.
> >
> >
> >     --
> >     MailScanner mailing list
> >     mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > Shawn Iverson, CETL
> > Director of Technology
> > Rush County Schools
> > 765-932-3901 option 7
> > iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/a1cb940a/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 12:13:18 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 15:13:18 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
Message-ID: <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>


I install it as root , it is ok ?


???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:08:
> Negative.
> 
> We better try again, with fresh copies...
> 
> sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
> sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
> curl 
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd 
> | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
> curl 
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter 
> | sudo tee /usr/lib/MailScanner/systemd/ms-milter
> sudo systemctl stop mailscanner.service
> sudo systemctl stop msmilter.service
> sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd 
> /lib/systemd/system/mailscanner.service
> sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter 
> /lib/systemd/system/msmilter.service
> sudo systemctl daemon-reload
> sudo systemctl enable mailscanner.service
> sudo systemctl enable msmilter.service
> sudo systemctl start mailscanner.service
> sudo systemctl start msmilter.service
> 
> On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
>     I did that and thsi is the output.
> 
>     ? mailscanner.service - LSB: MSMilter daemon
>      ? ? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
>     vendor preset: enabled)
>      ? ? Active: active (running) since Thu 2018-10-25 15:00:41 IDT; 16s ago
>      ? ? ? Docs: man:systemd-sysv-generator(8)
>      ? ?Process: 2970 ExecStart=/usr/lib/MailScanner/init/msmilter-init
>     start
>     (code=exited, status=0/SUCCESS)
>      ? Main PID: 2988 (MSMilter Daemon)
>      ? ? ?Tasks: 6 (limit: 2319)
>      ? ? CGroup: /system.slice/mailscanner.service
>      ? ? ? ? ? ? ??2988 MSMilter Daemon
>      ? ? ? ? ? ? ??2992 MSMilter Daemon
>      ? ? ? ? ? ? ??2993 MSMilter Daemon
>      ? ? ? ? ? ? ??2994 MSMilter Daemon
>      ? ? ? ? ? ? ??2995 MSMilter Daemon
>      ? ? ? ? ? ? ??2996 MSMilter Daemon
> 
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Reading configuration
>     file /etc/MailScanner/conf.d/README
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Reading configuration
>     file /etc/MailScanner/conf.d/SmgMailScanner.conf
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Configuration: Seen
>     configuration file /etc/MailScanner/conf.d/README before, skipping.
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Configuration: Seen
>     configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
>     skipping.
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Value of lockfiledir
>     cannot be a ruleset, only a simple value
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Read 1500 hostnames
>     from the phishing whitelist
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[2983]: Read 16624 hostnames
>     from the phishing blacklists
>     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     root[2989]: MSMilter started
>     Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     msmilter-init[2970]: MSMilter started
>     with process id 2988
>     Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     systemd[1]: Started LSB: MSMilter daemon.
> 
>     Is it Ok now ?
> 
> 
> 
> 
> 
> 
> 
>     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:56:
>      > Something is not right here.? mailscanner.service should not be
>     pointing
>      > to msmilter-init
>      >
>      > Try this....
>      >
>      > sudo systemctl stop mailscanner.service
>      > sudo systemctl stop msmilter.service
>      > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>      > /lib/systemd/system/mailscanner.service
>      > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>      > /lib/systemd/system/msmilter.service
>      > sudo systemctl daemon-reload
>      > sudo systemctl enable mailscanner.service
>      > sudo systemctl enable msmilter.service
>      > sudo systemctl start mailscanner.service
>      > sudo systemctl start msmilter.service
>      >
>      >
>      >
>      >
>      >
>      >
>      >
>      > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen <koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>
>      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
>      >
>      >
>      >? ? ?? mailscanner.service - LSB: MSMilter daemon
>      >? ? ? ? ? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
>     enabled;
>      >? ? ?vendor preset: enabled)
>      >? ? ? ? ? Active: active (running) since Thu 2018-10-25 14:44:44
>     IDT; 19s ago
>      >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>      >? ? ? ? ?Process: 2366
>     ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
>      >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? ? ?Process: 2383
>     ExecStart=/usr/lib/MailScanner/init/msmilter-init
>      >? ? ?start
>      >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? ? Main PID: 2492 (MSMilter Daemon)
>      >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>      >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>      >? ? ? ? ? ? ? ? ? ??2492 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2496 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2497 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2498 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2499 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2500 MSMilter Daemon
>      >
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Reading configuration
>      >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Configuration: Seen
>      >? ? ?configuration file /etc/MailScanner/conf.d/README before,
>     skipping.
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Configuration: Seen
>      >? ? ?configuration file
>     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
>      >? ? ?skipping.
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Could not read
>      >? ? ?directory /var/spool/MailScanner/incoming/Locks
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Error in configuration
>      >? ? ?file line 3103, directory
>     /var/spool/MailScanner/incoming/Locks for
>      >? ? ?lockfiledir does not exist (or is not readable)
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Read 1500 hostnames
>      >? ? ?from the phishing whitelist
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2396]: Read 16624 hostnames
>      >? ? ?from the phishing blacklists
>      >? ? ?Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?root[2494]: MSMilter started
>      >? ? ?Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?msmilter-init[2383]: MSMilter started
>      >? ? ?with process id 2492
>      >? ? ?Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>      >
>      >
>      >? ? ?--
>      >? ? ?MailScanner mailing list
>      > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >
>      >
>      >
>      > --
>      > Shawn Iverson, CETL
>      > Director of Technology
>      > Rush County Schools
>      > 765-932-3901 option 7
>      > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>     <mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >
>      >
>      >
>      >
>      >
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 12:15:18 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 08:15:18 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
 <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
Message-ID: <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>

yes, root is ok

On Thu, Oct 25, 2018 at 8:13 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

>
> I install it as root , it is ok ?
>
>
> ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:08:
> > Negative.
> >
> > We better try again, with fresh copies...
> >
> > sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
> > sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
> > curl
> >
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd
> > | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
> > curl
> >
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter
> > | sudo tee /usr/lib/MailScanner/systemd/ms-milter
> > sudo systemctl stop mailscanner.service
> > sudo systemctl stop msmilter.service
> > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> > /lib/systemd/system/mailscanner.service
> > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> > /lib/systemd/system/msmilter.service
> > sudo systemctl daemon-reload
> > sudo systemctl enable mailscanner.service
> > sudo systemctl enable msmilter.service
> > sudo systemctl start mailscanner.service
> > sudo systemctl start msmilter.service
> >
> > On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen <koby at mksoft.co.il
> > <mailto:koby at mksoft.co.il>> wrote:
> >
> >     I did that and thsi is the output.
> >
> >     ? mailscanner.service - LSB: MSMilter daemon
> >          Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
> enabled;
> >     vendor preset: enabled)
> >          Active: active (running) since Thu 2018-10-25 15:00:41 IDT; 16s
> ago
> >            Docs: man:systemd-sysv-generator(8)
> >         Process: 2970 ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >     start
> >     (code=exited, status=0/SUCCESS)
> >        Main PID: 2988 (MSMilter Daemon)
> >           Tasks: 6 (limit: 2319)
> >          CGroup: /system.slice/mailscanner.service
> >                  ??2988 MSMilter Daemon
> >                  ??2992 MSMilter Daemon
> >                  ??2993 MSMilter Daemon
> >                  ??2994 MSMilter Daemon
> >                  ??2995 MSMilter Daemon
> >                  ??2996 MSMilter Daemon
> >
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Reading configuration
> >     file /etc/MailScanner/conf.d/README
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Reading configuration
> >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Configuration: Seen
> >     configuration file /etc/MailScanner/conf.d/README before, skipping.
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Configuration: Seen
> >     configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf
> before,
> >     skipping.
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Value of lockfiledir
> >     cannot be a ruleset, only a simple value
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Read 1500 hostnames
> >     from the phishing whitelist
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[2983]: Read 16624 hostnames
> >     from the phishing blacklists
> >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     root[2989]: MSMilter started
> >     Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     msmilter-init[2970]: MSMilter started
> >     with process id 2988
> >     Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     systemd[1]: Started LSB: MSMilter daemon.
> >
> >     Is it Ok now ?
> >
> >
> >
> >
> >
> >
> >
> >     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 14:56:
> >      > Something is not right here.  mailscanner.service should not be
> >     pointing
> >      > to msmilter-init
> >      >
> >      > Try this....
> >      >
> >      > sudo systemctl stop mailscanner.service
> >      > sudo systemctl stop msmilter.service
> >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> >      > /lib/systemd/system/mailscanner.service
> >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> >      > /lib/systemd/system/msmilter.service
> >      > sudo systemctl daemon-reload
> >      > sudo systemctl enable mailscanner.service
> >      > sudo systemctl enable msmilter.service
> >      > sudo systemctl start mailscanner.service
> >      > sudo systemctl start msmilter.service
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >
> >      > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen <koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>
> >      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
> >      >
> >      >
> >      >     ? mailscanner.service - LSB: MSMilter daemon
> >      >          Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
> >     enabled;
> >      >     vendor preset: enabled)
> >      >          Active: active (running) since Thu 2018-10-25 14:44:44
> >     IDT; 19s ago
> >      >            Docs: man:systemd-sysv-generator(8)
> >      >         Process: 2366
> >     ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> >      >     (code=exited, status=0/SUCCESS)
> >      >         Process: 2383
> >     ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >      >     start
> >      >     (code=exited, status=0/SUCCESS)
> >      >        Main PID: 2492 (MSMilter Daemon)
> >      >           Tasks: 6 (limit: 2319)
> >      >          CGroup: /system.slice/mailscanner.service
> >      >                  ??2492 MSMilter Daemon
> >      >                  ??2496 MSMilter Daemon
> >      >                  ??2497 MSMilter Daemon
> >      >                  ??2498 MSMilter Daemon
> >      >                  ??2499 MSMilter Daemon
> >      >                  ??2500 MSMilter Daemon
> >      >
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Reading configuration
> >      >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Configuration: Seen
> >      >     configuration file /etc/MailScanner/conf.d/README before,
> >     skipping.
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Configuration: Seen
> >      >     configuration file
> >     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> >      >     skipping.
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Could not read
> >      >     directory /var/spool/MailScanner/incoming/Locks
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Error in configuration
> >      >     file line 3103, directory
> >     /var/spool/MailScanner/incoming/Locks for
> >      >     lockfiledir does not exist (or is not readable)
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Read 1500 hostnames
> >      >     from the phishing whitelist
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2396]: Read 16624 hostnames
> >      >     from the phishing blacklists
> >      >     Oct 25 14:44:43 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     root[2494]: MSMilter started
> >      >     Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     msmilter-init[2383]: MSMilter started
> >      >     with process id 2492
> >      >     Oct 25 14:44:44 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     systemd[1]: Started LSB: MSMilter daemon.
> >      >
> >      >
> >      >     --
> >      >     MailScanner mailing list
> >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >
> >      >
> >      >
> >      > --
> >      > Shawn Iverson, CETL
> >      > Director of Technology
> >      > Rush County Schools
> >      > 765-932-3901 option 7
> >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >
> >      >
> >      >
> >      >
> >      >
> >
> >
> >     --
> >     MailScanner mailing list
> >     mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > Shawn Iverson, CETL
> > Director of Technology
> > Rush County Schools
> > 765-932-3901 option 7
> > iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/8ac509ec/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 12:20:16 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 15:20:16 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
 <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
 <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>
Message-ID: <bcfb2bed-dcd8-0b61-3c39-f0fff76608f0@mksoft.co.il>


I did what you say ,
here is the output ,

root at lab:~# systemctl status mailscanner.service -l
? mailscanner.service - LSB: MSMilter daemon
    Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
vendor preset: enabled)
    Active: active (running) since Thu 2018-10-25 15:12:10 IDT; 6min ago
      Docs: man:systemd-sysv-generator(8)
   Process: 3970 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
(code=exited, status=0/SUCCESS)
  Main PID: 4052 (MSMilter Daemon)
     Tasks: 6 (limit: 2319)
    CGroup: /system.slice/mailscanner.service
            ??4052 MSMilter Daemon
            ??4056 MSMilter Daemon
            ??4057 MSMilter Daemon
            ??4058 MSMilter Daemon
            ??4059 MSMilter Daemon
            ??4060 MSMilter Daemon

Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Reading configuration 
file /etc/MailScanner/conf.d/README
Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Reading configuration 
file /etc/MailScanner/conf.d/SmgMailScanner.conf
Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Configuration: Seen 
configuration file /etc/MailScanner/conf.d/README before, skipping.
Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Configuration: Seen 
configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before, 
skipping.
Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Value of lockfiledir 
cannot be a ruleset, only a simple value
Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Read 1500 hostnames 
from the phishing whitelist
Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Read 16624 hostnames 
from the phishing blacklists
Oct 25 15:12:09 lab.mksoft.co.il root[4053]: MSMilter started
Oct 25 15:12:10 lab.mksoft.co.il msmilter-init[3970]: MSMilter started 
with process id 4052
Oct 25 15:12:10 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.






???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:15:
> yes, root is ok
> 
> On Thu, Oct 25, 2018 at 8:13 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
> 
>     I install it as root , it is ok ?
> 
> 
>     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:08:
>      > Negative.
>      >
>      > We better try again, with fresh copies...
>      >
>      > sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
>      > sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
>      > curl
>      >
>     https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd
> 
>      > | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
>      > curl
>      >
>     https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter
> 
>      > | sudo tee /usr/lib/MailScanner/systemd/ms-milter
>      > sudo systemctl stop mailscanner.service
>      > sudo systemctl stop msmilter.service
>      > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>      > /lib/systemd/system/mailscanner.service
>      > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>      > /lib/systemd/system/msmilter.service
>      > sudo systemctl daemon-reload
>      > sudo systemctl enable mailscanner.service
>      > sudo systemctl enable msmilter.service
>      > sudo systemctl start mailscanner.service
>      > sudo systemctl start msmilter.service
>      >
>      > On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen <koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>
>      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
>      >
>      >? ? ?I did that and thsi is the output.
>      >
>      >? ? ?? mailscanner.service - LSB: MSMilter daemon
>      >? ? ? ? ? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
>     enabled;
>      >? ? ?vendor preset: enabled)
>      >? ? ? ? ? Active: active (running) since Thu 2018-10-25 15:00:41
>     IDT; 16s ago
>      >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>      >? ? ? ? ?Process: 2970
>     ExecStart=/usr/lib/MailScanner/init/msmilter-init
>      >? ? ?start
>      >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? ? Main PID: 2988 (MSMilter Daemon)
>      >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>      >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>      >? ? ? ? ? ? ? ? ? ??2988 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2992 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2993 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2994 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2995 MSMilter Daemon
>      >? ? ? ? ? ? ? ? ? ??2996 MSMilter Daemon
>      >
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Reading configuration
>      >? ? ?file /etc/MailScanner/conf.d/README
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Reading configuration
>      >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Configuration: Seen
>      >? ? ?configuration file /etc/MailScanner/conf.d/README before,
>     skipping.
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Configuration: Seen
>      >? ? ?configuration file
>     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
>      >? ? ?skipping.
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Value of lockfiledir
>      >? ? ?cannot be a ruleset, only a simple value
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Read 1500 hostnames
>      >? ? ?from the phishing whitelist
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?MSMilter[2983]: Read 16624 hostnames
>      >? ? ?from the phishing blacklists
>      >? ? ?Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?root[2989]: MSMilter started
>      >? ? ?Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?msmilter-init[2970]: MSMilter started
>      >? ? ?with process id 2988
>      >? ? ?Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     <http://lab.mksoft.co.il>
>      >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>      >
>      >? ? ?Is it Ok now ?
>      >
>      >
>      >
>      >
>      >
>      >
>      >
>      >? ? ????? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ????
>     14:56:
>      >? ? ? > Something is not right here.? mailscanner.service should
>     not be
>      >? ? ?pointing
>      >? ? ? > to msmilter-init
>      >? ? ? >
>      >? ? ? > Try this....
>      >? ? ? >
>      >? ? ? > sudo systemctl stop mailscanner.service
>      >? ? ? > sudo systemctl stop msmilter.service
>      >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>      >? ? ? > /lib/systemd/system/mailscanner.service
>      >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>      >? ? ? > /lib/systemd/system/msmilter.service
>      >? ? ? > sudo systemctl daemon-reload
>      >? ? ? > sudo systemctl enable mailscanner.service
>      >? ? ? > sudo systemctl enable msmilter.service
>      >? ? ? > sudo systemctl start mailscanner.service
>      >? ? ? > sudo systemctl start msmilter.service
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen
>     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>      >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>      >? ? ? > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>> wrote:
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >? ? ?? mailscanner.service - LSB: MSMilter daemon
>      >? ? ? >? ? ? ? ? Loaded: loaded
>     (/usr/lib/MailScanner/init/msmilter-init;
>      >? ? ?enabled;
>      >? ? ? >? ? ?vendor preset: enabled)
>      >? ? ? >? ? ? ? ? Active: active (running) since Thu 2018-10-25
>     14:44:44
>      >? ? ?IDT; 19s ago
>      >? ? ? >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>      >? ? ? >? ? ? ? ?Process: 2366
>      >? ? ?ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
>      >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? >? ? ? ? ?Process: 2383
>      >? ? ?ExecStart=/usr/lib/MailScanner/init/msmilter-init
>      >? ? ? >? ? ?start
>      >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? >? ? ? ? Main PID: 2492 (MSMilter Daemon)
>      >? ? ? >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>      >? ? ? >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2492 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2496 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2497 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2498 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2499 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2500 MSMilter Daemon
>      >? ? ? >
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Reading configuration
>      >? ? ? >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Configuration: Seen
>      >? ? ? >? ? ?configuration file /etc/MailScanner/conf.d/README before,
>      >? ? ?skipping.
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Configuration: Seen
>      >? ? ? >? ? ?configuration file
>      >? ? ?/etc/MailScanner/conf.d/SmgMailScanner.conf before,
>      >? ? ? >? ? ?skipping.
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Could not read
>      >? ? ? >? ? ?directory /var/spool/MailScanner/incoming/Locks
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Error in configuration
>      >? ? ? >? ? ?file line 3103, directory
>      >? ? ?/var/spool/MailScanner/incoming/Locks for
>      >? ? ? >? ? ?lockfiledir does not exist (or is not readable)
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Read 1500 hostnames
>      >? ? ? >? ? ?from the phishing whitelist
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2396]: Read 16624 hostnames
>      >? ? ? >? ? ?from the phishing blacklists
>      >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?root[2494]: MSMilter started
>      >? ? ? >? ? ?Oct 25 14:44:44 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?msmilter-init[2383]: MSMilter started
>      >? ? ? >? ? ?with process id 2492
>      >? ? ? >? ? ?Oct 25 14:44:44 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >? ? ?--
>      >? ? ? >? ? ?MailScanner mailing list
>      >? ? ? > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>>
>      >? ? ? > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? > --
>      >? ? ? > Shawn Iverson, CETL
>      >? ? ? > Director of Technology
>      >? ? ? > Rush County Schools
>      >? ? ? > 765-932-3901 option 7
>      >? ? ? > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>>
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >
>      >
>      >? ? ?--
>      >? ? ?MailScanner mailing list
>      > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >
>      >
>      >
>      > --
>      > Shawn Iverson, CETL
>      > Director of Technology
>      > Rush County Schools
>      > 765-932-3901 option 7
>      > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>     <mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >
>      >
>      >
>      >
>      >
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 12:22:26 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 08:22:26 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <bcfb2bed-dcd8-0b61-3c39-f0fff76608f0@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
 <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
 <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>
 <bcfb2bed-dcd8-0b61-3c39-f0fff76608f0@mksoft.co.il>
Message-ID: <CABu_8z+JMQX_cBeEa-6uBA6sOijssn2EoiOKk-p3_=zvtEjgxQ@mail.gmail.com>

Wow, this is strange.

The contents of /lib/systemd/system/mailscanner.service should be this:

[Unit]
Description=LSB: MailScanner daemon
Documentation=man:systemd-sysv-generator(8)
SourcePath=/usr/lib/MailScanner/init/ms-init
After=network-online.target remote-fs.target rsyslog.service mariadb.service
Wants=network-online.target mariadb.service
[Service]
Type=forking
Restart=no
TimeoutSec=1min
IgnoreSIGPIPE=no
KillMode=process
GuessMainPID=no
RemainAfterExit=yes
ExecStart=/usr/lib/MailScanner/init/ms-init start
ExecStop=/usr/lib/MailScanner/init/ms-init stop
EnvironmentFile=-/etc/MailScanner/defaults
PIDFile=/var/run/MailScanner.pid
[Install]
WantedBy=multi-user.target

Is this what you see in the file?



On Thu, Oct 25, 2018 at 8:20 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

>
> I did what you say ,
> here is the output ,
>
> root at lab:~# systemctl status mailscanner.service -l
> ? mailscanner.service - LSB: MSMilter daemon
>     Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
> vendor preset: enabled)
>     Active: active (running) since Thu 2018-10-25 15:12:10 IDT; 6min ago
>       Docs: man:systemd-sysv-generator(8)
>    Process: 3970 ExecStart=/usr/lib/MailScanner/init/msmilter-init start
> (code=exited, status=0/SUCCESS)
>   Main PID: 4052 (MSMilter Daemon)
>      Tasks: 6 (limit: 2319)
>     CGroup: /system.slice/mailscanner.service
>             ??4052 MSMilter Daemon
>             ??4056 MSMilter Daemon
>             ??4057 MSMilter Daemon
>             ??4058 MSMilter Daemon
>             ??4059 MSMilter Daemon
>             ??4060 MSMilter Daemon
>
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Reading configuration
> file /etc/MailScanner/conf.d/README
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Reading configuration
> file /etc/MailScanner/conf.d/SmgMailScanner.conf
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/README before, skipping.
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> skipping.
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Value of lockfiledir
> cannot be a ruleset, only a simple value
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Read 1500 hostnames
> from the phishing whitelist
> Oct 25 15:12:09 lab.mksoft.co.il MSMilter[3983]: Read 16624 hostnames
> from the phishing blacklists
> Oct 25 15:12:09 lab.mksoft.co.il root[4053]: MSMilter started
> Oct 25 15:12:10 lab.mksoft.co.il msmilter-init[3970]: MSMilter started
> with process id 4052
> Oct 25 15:12:10 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter daemon.
>
>
>
>
>
>
> ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:15:
> > yes, root is ok
> >
> > On Thu, Oct 25, 2018 at 8:13 AM Koby Peleg Hen <koby at mksoft.co.il
> > <mailto:koby at mksoft.co.il>> wrote:
> >
> >
> >     I install it as root , it is ok ?
> >
> >
> >     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:08:
> >      > Negative.
> >      >
> >      > We better try again, with fresh copies...
> >      >
> >      > sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
> >      > sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
> >      > curl
> >      >
> >
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd
> >
> >      > | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
> >      > curl
> >      >
> >
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter
> >
> >      > | sudo tee /usr/lib/MailScanner/systemd/ms-milter
> >      > sudo systemctl stop mailscanner.service
> >      > sudo systemctl stop msmilter.service
> >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> >      > /lib/systemd/system/mailscanner.service
> >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> >      > /lib/systemd/system/msmilter.service
> >      > sudo systemctl daemon-reload
> >      > sudo systemctl enable mailscanner.service
> >      > sudo systemctl enable msmilter.service
> >      > sudo systemctl start mailscanner.service
> >      > sudo systemctl start msmilter.service
> >      >
> >      > On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen <koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>
> >      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
> >      >
> >      >     I did that and thsi is the output.
> >      >
> >      >     ? mailscanner.service - LSB: MSMilter daemon
> >      >          Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
> >     enabled;
> >      >     vendor preset: enabled)
> >      >          Active: active (running) since Thu 2018-10-25 15:00:41
> >     IDT; 16s ago
> >      >            Docs: man:systemd-sysv-generator(8)
> >      >         Process: 2970
> >     ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >      >     start
> >      >     (code=exited, status=0/SUCCESS)
> >      >        Main PID: 2988 (MSMilter Daemon)
> >      >           Tasks: 6 (limit: 2319)
> >      >          CGroup: /system.slice/mailscanner.service
> >      >                  ??2988 MSMilter Daemon
> >      >                  ??2992 MSMilter Daemon
> >      >                  ??2993 MSMilter Daemon
> >      >                  ??2994 MSMilter Daemon
> >      >                  ??2995 MSMilter Daemon
> >      >                  ??2996 MSMilter Daemon
> >      >
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Reading configuration
> >      >     file /etc/MailScanner/conf.d/README
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Reading configuration
> >      >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Configuration: Seen
> >      >     configuration file /etc/MailScanner/conf.d/README before,
> >     skipping.
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Configuration: Seen
> >      >     configuration file
> >     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> >      >     skipping.
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Value of lockfiledir
> >      >     cannot be a ruleset, only a simple value
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Read 1500 hostnames
> >      >     from the phishing whitelist
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     MSMilter[2983]: Read 16624 hostnames
> >      >     from the phishing blacklists
> >      >     Oct 25 15:00:40 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     root[2989]: MSMilter started
> >      >     Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     msmilter-init[2970]: MSMilter started
> >      >     with process id 2988
> >      >     Oct 25 15:00:41 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     <http://lab.mksoft.co.il>
> >      >     systemd[1]: Started LSB: MSMilter daemon.
> >      >
> >      >     Is it Ok now ?
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ????
> >     14:56:
> >      >      > Something is not right here.  mailscanner.service should
> >     not be
> >      >     pointing
> >      >      > to msmilter-init
> >      >      >
> >      >      > Try this....
> >      >      >
> >      >      > sudo systemctl stop mailscanner.service
> >      >      > sudo systemctl stop msmilter.service
> >      >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> >      >      > /lib/systemd/system/mailscanner.service
> >      >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> >      >      > /lib/systemd/system/msmilter.service
> >      >      > sudo systemctl daemon-reload
> >      >      > sudo systemctl enable mailscanner.service
> >      >      > sudo systemctl enable msmilter.service
> >      >      > sudo systemctl start mailscanner.service
> >      >      > sudo systemctl start msmilter.service
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen
> >     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >      >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >      >      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>> wrote:
> >      >      >
> >      >      >
> >      >      >     ? mailscanner.service - LSB: MSMilter daemon
> >      >      >          Loaded: loaded
> >     (/usr/lib/MailScanner/init/msmilter-init;
> >      >     enabled;
> >      >      >     vendor preset: enabled)
> >      >      >          Active: active (running) since Thu 2018-10-25
> >     14:44:44
> >      >     IDT; 19s ago
> >      >      >            Docs: man:systemd-sysv-generator(8)
> >      >      >         Process: 2366
> >      >     ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> >      >      >     (code=exited, status=0/SUCCESS)
> >      >      >         Process: 2383
> >      >     ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >      >      >     start
> >      >      >     (code=exited, status=0/SUCCESS)
> >      >      >        Main PID: 2492 (MSMilter Daemon)
> >      >      >           Tasks: 6 (limit: 2319)
> >      >      >          CGroup: /system.slice/mailscanner.service
> >      >      >                  ??2492 MSMilter Daemon
> >      >      >                  ??2496 MSMilter Daemon
> >      >      >                  ??2497 MSMilter Daemon
> >      >      >                  ??2498 MSMilter Daemon
> >      >      >                  ??2499 MSMilter Daemon
> >      >      >                  ??2500 MSMilter Daemon
> >      >      >
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Reading configuration
> >      >      >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Configuration: Seen
> >      >      >     configuration file /etc/MailScanner/conf.d/README
> before,
> >      >     skipping.
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Configuration: Seen
> >      >      >     configuration file
> >      >     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> >      >      >     skipping.
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Could not read
> >      >      >     directory /var/spool/MailScanner/incoming/Locks
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Error in configuration
> >      >      >     file line 3103, directory
> >      >     /var/spool/MailScanner/incoming/Locks for
> >      >      >     lockfiledir does not exist (or is not readable)
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Read 1500 hostnames
> >      >      >     from the phishing whitelist
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2396]: Read 16624 hostnames
> >      >      >     from the phishing blacklists
> >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     root[2494]: MSMilter started
> >      >      >     Oct 25 14:44:44 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     msmilter-init[2383]: MSMilter started
> >      >      >     with process id 2492
> >      >      >     Oct 25 14:44:44 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     systemd[1]: Started LSB: MSMilter daemon.
> >      >      >
> >      >      >
> >      >      >     --
> >      >      >     MailScanner mailing list
> >      >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>>
> >      >      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >      >
> >      >      >
> >      >      >
> >      >      > --
> >      >      > Shawn Iverson, CETL
> >      >      > Director of Technology
> >      >      > Rush County Schools
> >      >      > 765-932-3901 option 7
> >      >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>>
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >
> >      >
> >      >     --
> >      >     MailScanner mailing list
> >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >
> >      >
> >      >
> >      > --
> >      > Shawn Iverson, CETL
> >      > Director of Technology
> >      > Rush County Schools
> >      > 765-932-3901 option 7
> >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >
> >      >
> >      >
> >      >
> >      >
> >
> >
> >     --
> >     MailScanner mailing list
> >     mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > Shawn Iverson, CETL
> > Director of Technology
> > Rush County Schools
> > 765-932-3901 option 7
> > iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/478a30d3/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 12:26:34 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 15:26:34 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8z+JMQX_cBeEa-6uBA6sOijssn2EoiOKk-p3_=zvtEjgxQ@mail.gmail.com>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
 <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
 <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>
 <bcfb2bed-dcd8-0b61-3c39-f0fff76608f0@mksoft.co.il>
 <CABu_8z+JMQX_cBeEa-6uBA6sOijssn2EoiOKk-p3_=zvtEjgxQ@mail.gmail.com>
Message-ID: <1029420f-5f93-83b9-f0b2-e2f7c32ca875@mksoft.co.il>

This is the file in my vm :

[Unit]
Description=LSB: MailScanner daemon
Documentation=man:systemd-sysv-generator(8)
SourcePath=/usr/lib/MailScanner/init/ms-init
After=network-online.target remote-fs.target rsyslog.service mariadb.service
Wants=network-online.target mariadb.service

[Service]
Type=forking
Restart=no
TimeoutSec=1min
IgnoreSIGPIPE=no
KillMode=process
GuessMainPID=no
RemainAfterExit=yes
ExecStart=/usr/lib/MailScanner/init/ms-init start
ExecStop=/usr/lib/MailScanner/init/ms-init stop
EnvironmentFile=-/etc/MailScanner/defaults
PIDFile=/var/run/MailScanner.pid

[Install]
WantedBy=multi-user.target



I notice that is looking for mariadb ...
Well i dont have it installed





???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:22:
> Wow, this is strange.
> 
> The contents of /lib/systemd/system/mailscanner.service should be this:
> 
> [Unit]
> 	Description=LSB: MailScanner daemon
> 	Documentation=man:systemd-sysv-generator(8)
> 	SourcePath=/usr/lib/MailScanner/init/ms-init
> 	After=network-online.target remote-fs.target rsyslog.service 
> mariadb.service
> 	Wants=network-online.target mariadb.service
> 	
> 	[Service]
> 	Type=forking
> 	Restart=no
> 	TimeoutSec=1min
> 	IgnoreSIGPIPE=no
> 	KillMode=process
> 	GuessMainPID=no
> 	RemainAfterExit=yes
> 	ExecStart=/usr/lib/MailScanner/init/ms-init start
> 	ExecStop=/usr/lib/MailScanner/init/ms-init stop
> 	EnvironmentFile=-/etc/MailScanner/defaults
> 	PIDFile=/var/run/MailScanner.pid
> 	
> 	[Install]
> 	WantedBy=multi-user.target
> 
> 
> Is this what you see in the file?
> 
> 
> 
> On Thu, Oct 25, 2018 at 8:20 AM Koby Peleg Hen <koby at mksoft.co.il 
> <mailto:koby at mksoft.co.il>> wrote:
> 
> 
>     I did what you say ,
>     here is the output ,
> 
>     root at lab:~# systemctl status mailscanner.service -l
>     ? mailscanner.service - LSB: MSMilter daemon
>      ? ? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
>     vendor preset: enabled)
>      ? ? Active: active (running) since Thu 2018-10-25 15:12:10 IDT;
>     6min ago
>      ? ? ? Docs: man:systemd-sysv-generator(8)
>      ? ?Process: 3970 ExecStart=/usr/lib/MailScanner/init/msmilter-init
>     start
>     (code=exited, status=0/SUCCESS)
>      ? Main PID: 4052 (MSMilter Daemon)
>      ? ? ?Tasks: 6 (limit: 2319)
>      ? ? CGroup: /system.slice/mailscanner.service
>      ? ? ? ? ? ? ??4052 MSMilter Daemon
>      ? ? ? ? ? ? ??4056 MSMilter Daemon
>      ? ? ? ? ? ? ??4057 MSMilter Daemon
>      ? ? ? ? ? ? ??4058 MSMilter Daemon
>      ? ? ? ? ? ? ??4059 MSMilter Daemon
>      ? ? ? ? ? ? ??4060 MSMilter Daemon
> 
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Reading configuration
>     file /etc/MailScanner/conf.d/README
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Reading configuration
>     file /etc/MailScanner/conf.d/SmgMailScanner.conf
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Configuration: Seen
>     configuration file /etc/MailScanner/conf.d/README before, skipping.
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Configuration: Seen
>     configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
>     skipping.
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Value of lockfiledir
>     cannot be a ruleset, only a simple value
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Read 1500 hostnames
>     from the phishing whitelist
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     MSMilter[3983]: Read 16624 hostnames
>     from the phishing blacklists
>     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     root[4053]: MSMilter started
>     Oct 25 15:12:10 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     msmilter-init[3970]: MSMilter started
>     with process id 4052
>     Oct 25 15:12:10 lab.mksoft.co.il <http://lab.mksoft.co.il>
>     systemd[1]: Started LSB: MSMilter daemon.
> 
> 
> 
> 
> 
> 
>     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:15:
>      > yes, root is ok
>      >
>      > On Thu, Oct 25, 2018 at 8:13 AM Koby Peleg Hen <koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>
>      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
>      >
>      >
>      >? ? ?I install it as root , it is ok ?
>      >
>      >
>      >? ? ????? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ????
>     15:08:
>      >? ? ? > Negative.
>      >? ? ? >
>      >? ? ? > We better try again, with fresh copies...
>      >? ? ? >
>      >? ? ? > sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
>      >? ? ? > sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
>      >? ? ? > curl
>      >? ? ? >
>      >
>     https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd
>      >
>      >? ? ? > | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
>      >? ? ? > curl
>      >? ? ? >
>      >
>     https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter
>      >
>      >? ? ? > | sudo tee /usr/lib/MailScanner/systemd/ms-milter
>      >? ? ? > sudo systemctl stop mailscanner.service
>      >? ? ? > sudo systemctl stop msmilter.service
>      >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>      >? ? ? > /lib/systemd/system/mailscanner.service
>      >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>      >? ? ? > /lib/systemd/system/msmilter.service
>      >? ? ? > sudo systemctl daemon-reload
>      >? ? ? > sudo systemctl enable mailscanner.service
>      >? ? ? > sudo systemctl enable msmilter.service
>      >? ? ? > sudo systemctl start mailscanner.service
>      >? ? ? > sudo systemctl start msmilter.service
>      >? ? ? >
>      >? ? ? > On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen
>     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>      >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>      >? ? ? > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>> wrote:
>      >? ? ? >
>      >? ? ? >? ? ?I did that and thsi is the output.
>      >? ? ? >
>      >? ? ? >? ? ?? mailscanner.service - LSB: MSMilter daemon
>      >? ? ? >? ? ? ? ? Loaded: loaded
>     (/usr/lib/MailScanner/init/msmilter-init;
>      >? ? ?enabled;
>      >? ? ? >? ? ?vendor preset: enabled)
>      >? ? ? >? ? ? ? ? Active: active (running) since Thu 2018-10-25
>     15:00:41
>      >? ? ?IDT; 16s ago
>      >? ? ? >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>      >? ? ? >? ? ? ? ?Process: 2970
>      >? ? ?ExecStart=/usr/lib/MailScanner/init/msmilter-init
>      >? ? ? >? ? ?start
>      >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? >? ? ? ? Main PID: 2988 (MSMilter Daemon)
>      >? ? ? >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>      >? ? ? >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2988 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2992 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2993 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2994 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2995 MSMilter Daemon
>      >? ? ? >? ? ? ? ? ? ? ? ? ??2996 MSMilter Daemon
>      >? ? ? >
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Reading configuration
>      >? ? ? >? ? ?file /etc/MailScanner/conf.d/README
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Reading configuration
>      >? ? ? >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Configuration: Seen
>      >? ? ? >? ? ?configuration file /etc/MailScanner/conf.d/README before,
>      >? ? ?skipping.
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Configuration: Seen
>      >? ? ? >? ? ?configuration file
>      >? ? ?/etc/MailScanner/conf.d/SmgMailScanner.conf before,
>      >? ? ? >? ? ?skipping.
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Value of lockfiledir
>      >? ? ? >? ? ?cannot be a ruleset, only a simple value
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Read 1500 hostnames
>      >? ? ? >? ? ?from the phishing whitelist
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?MSMilter[2983]: Read 16624 hostnames
>      >? ? ? >? ? ?from the phishing blacklists
>      >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?root[2989]: MSMilter started
>      >? ? ? >? ? ?Oct 25 15:00:41 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?msmilter-init[2970]: MSMilter started
>      >? ? ? >? ? ?with process id 2988
>      >? ? ? >? ? ?Oct 25 15:00:41 lab.mksoft.co.il
>     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>      >? ? ? >
>      >? ? ? >? ? ?Is it Ok now ?
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >? ? ????? ?? ??? Shawn Iverson via MailScanner,
>     ??25.10.2018 ????
>      >? ? ?14:56:
>      >? ? ? >? ? ? > Something is not right here.? mailscanner.service
>     should
>      >? ? ?not be
>      >? ? ? >? ? ?pointing
>      >? ? ? >? ? ? > to msmilter-init
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? > Try this....
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? > sudo systemctl stop mailscanner.service
>      >? ? ? >? ? ? > sudo systemctl stop msmilter.service
>      >? ? ? >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>      >? ? ? >? ? ? > /lib/systemd/system/mailscanner.service
>      >? ? ? >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>      >? ? ? >? ? ? > /lib/systemd/system/msmilter.service
>      >? ? ? >? ? ? > sudo systemctl daemon-reload
>      >? ? ? >? ? ? > sudo systemctl enable mailscanner.service
>      >? ? ? >? ? ? > sudo systemctl enable msmilter.service
>      >? ? ? >? ? ? > sudo systemctl start mailscanner.service
>      >? ? ? >? ? ? > sudo systemctl start msmilter.service
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen
>      >? ? ?<koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>      >? ? ? >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>
>      >? ? ? >? ? ? > <mailto:koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il> <mailto:koby at mksoft.co.il
>     <mailto:koby at mksoft.co.il>>
>      >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>>> wrote:
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >? ? ?? mailscanner.service - LSB: MSMilter daemon
>      >? ? ? >? ? ? >? ? ? ? ? Loaded: loaded
>      >? ? ?(/usr/lib/MailScanner/init/msmilter-init;
>      >? ? ? >? ? ?enabled;
>      >? ? ? >? ? ? >? ? ?vendor preset: enabled)
>      >? ? ? >? ? ? >? ? ? ? ? Active: active (running) since Thu 2018-10-25
>      >? ? ?14:44:44
>      >? ? ? >? ? ?IDT; 19s ago
>      >? ? ? >? ? ? >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>      >? ? ? >? ? ? >? ? ? ? ?Process: 2366
>      >? ? ? >? ? ?ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
>      >? ? ? >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? >? ? ? >? ? ? ? ?Process: 2383
>      >? ? ? >? ? ?ExecStart=/usr/lib/MailScanner/init/msmilter-init
>      >? ? ? >? ? ? >? ? ?start
>      >? ? ? >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>      >? ? ? >? ? ? >? ? ? ? Main PID: 2492 (MSMilter Daemon)
>      >? ? ? >? ? ? >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>      >? ? ? >? ? ? >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>      >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2492 MSMilter Daemon
>      >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2496 MSMilter Daemon
>      >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2497 MSMilter Daemon
>      >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2498 MSMilter Daemon
>      >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2499 MSMilter Daemon
>      >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2500 MSMilter Daemon
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Reading configuration
>      >? ? ? >? ? ? >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Configuration: Seen
>      >? ? ? >? ? ? >? ? ?configuration file
>     /etc/MailScanner/conf.d/README before,
>      >? ? ? >? ? ?skipping.
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Configuration: Seen
>      >? ? ? >? ? ? >? ? ?configuration file
>      >? ? ? >? ? ?/etc/MailScanner/conf.d/SmgMailScanner.conf before,
>      >? ? ? >? ? ? >? ? ?skipping.
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Could not read
>      >? ? ? >? ? ? >? ? ?directory /var/spool/MailScanner/incoming/Locks
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Error in configuration
>      >? ? ? >? ? ? >? ? ?file line 3103, directory
>      >? ? ? >? ? ?/var/spool/MailScanner/incoming/Locks for
>      >? ? ? >? ? ? >? ? ?lockfiledir does not exist (or is not readable)
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Read 1500 hostnames
>      >? ? ? >? ? ? >? ? ?from the phishing whitelist
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?MSMilter[2396]: Read 16624 hostnames
>      >? ? ? >? ? ? >? ? ?from the phishing blacklists
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?root[2494]: MSMilter started
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:44 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?msmilter-init[2383]: MSMilter started
>      >? ? ? >? ? ? >? ? ?with process id 2492
>      >? ? ? >? ? ? >? ? ?Oct 25 14:44:44 lab.mksoft.co.il
>     <http://lab.mksoft.co.il>
>      >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>      >? ? ? >? ? ?<http://lab.mksoft.co.il>
>      >? ? ? >? ? ? >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >? ? ?--
>      >? ? ? >? ? ? >? ? ?MailScanner mailing list
>      >? ? ? >? ? ? > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>>
>      >? ? ? >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>>>
>      >? ? ? >? ? ? >
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? > --
>      >? ? ? >? ? ? > Shawn Iverson, CETL
>      >? ? ? >? ? ? > Director of Technology
>      >? ? ? >? ? ? > Rush County Schools
>      >? ? ? >? ? ? > 765-932-3901 option 7
>      >? ? ? >? ? ? > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >? ? ? >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>>
>      >? ? ? >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >? ? ? >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>>>
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >? ? ?--
>      >? ? ? >? ? ?MailScanner mailing list
>      >? ? ? > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>>
>      >? ? ? > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? > --
>      >? ? ? > Shawn Iverson, CETL
>      >? ? ? > Director of Technology
>      >? ? ? > Rush County Schools
>      >? ? ? > 765-932-3901 option 7
>      >? ? ? > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>      >? ? ?<mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>>
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >? ? ? >
>      >
>      >
>      >? ? ?--
>      >? ? ?MailScanner mailing list
>      > mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>      >? ? ?<mailto:mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>>
>      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>      >
>      >
>      >
>      > --
>      > Shawn Iverson, CETL
>      > Director of Technology
>      > Rush County Schools
>      > 765-932-3901 option 7
>      > iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>
>     <mailto:iversons at rushville.k12.in.us
>     <mailto:iversons at rushville.k12.in.us>>
>      >
>      >
>      >
>      >
>      >
> 
> 
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 12:27:54 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 08:27:54 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <1029420f-5f93-83b9-f0b2-e2f7c32ca875@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
 <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
 <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>
 <bcfb2bed-dcd8-0b61-3c39-f0fff76608f0@mksoft.co.il>
 <CABu_8z+JMQX_cBeEa-6uBA6sOijssn2EoiOKk-p3_=zvtEjgxQ@mail.gmail.com>
 <1029420f-5f93-83b9-f0b2-e2f7c32ca875@mksoft.co.il>
Message-ID: <CABu_8z+1bn+7QsfV3VVyzcAcpQXUUKfe-2BRuML756AoNxOobg@mail.gmail.com>

Well, that is correct.  However, systemd should not be calling this unit
and is not, have you rebooted since we reset the files?

On Thu, Oct 25, 2018 at 8:26 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> This is the file in my vm :
>
> [Unit]
> Description=LSB: MailScanner daemon
> Documentation=man:systemd-sysv-generator(8)
> SourcePath=/usr/lib/MailScanner/init/ms-init
> After=network-online.target remote-fs.target rsyslog.service
> mariadb.service
> Wants=network-online.target mariadb.service
>
> [Service]
> Type=forking
> Restart=no
> TimeoutSec=1min
> IgnoreSIGPIPE=no
> KillMode=process
> GuessMainPID=no
> RemainAfterExit=yes
> ExecStart=/usr/lib/MailScanner/init/ms-init start
> ExecStop=/usr/lib/MailScanner/init/ms-init stop
> EnvironmentFile=-/etc/MailScanner/defaults
> PIDFile=/var/run/MailScanner.pid
>
> [Install]
> WantedBy=multi-user.target
>
>
>
> I notice that is looking for mariadb ...
> Well i dont have it installed
>
>
>
>
>
> ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:22:
> > Wow, this is strange.
> >
> > The contents of /lib/systemd/system/mailscanner.service should be this:
> >
> > [Unit]
> >       Description=LSB: MailScanner daemon
> >       Documentation=man:systemd-sysv-generator(8)
> >       SourcePath=/usr/lib/MailScanner/init/ms-init
> >       After=network-online.target remote-fs.target rsyslog.service
> > mariadb.service
> >       Wants=network-online.target mariadb.service
> >
> >       [Service]
> >       Type=forking
> >       Restart=no
> >       TimeoutSec=1min
> >       IgnoreSIGPIPE=no
> >       KillMode=process
> >       GuessMainPID=no
> >       RemainAfterExit=yes
> >       ExecStart=/usr/lib/MailScanner/init/ms-init start
> >       ExecStop=/usr/lib/MailScanner/init/ms-init stop
> >       EnvironmentFile=-/etc/MailScanner/defaults
> >       PIDFile=/var/run/MailScanner.pid
> >
> >       [Install]
> >       WantedBy=multi-user.target
> >
> >
> > Is this what you see in the file?
> >
> >
> >
> > On Thu, Oct 25, 2018 at 8:20 AM Koby Peleg Hen <koby at mksoft.co.il
> > <mailto:koby at mksoft.co.il>> wrote:
> >
> >
> >     I did what you say ,
> >     here is the output ,
> >
> >     root at lab:~# systemctl status mailscanner.service -l
> >     ? mailscanner.service - LSB: MSMilter daemon
> >          Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init;
> enabled;
> >     vendor preset: enabled)
> >          Active: active (running) since Thu 2018-10-25 15:12:10 IDT;
> >     6min ago
> >            Docs: man:systemd-sysv-generator(8)
> >         Process: 3970 ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >     start
> >     (code=exited, status=0/SUCCESS)
> >        Main PID: 4052 (MSMilter Daemon)
> >           Tasks: 6 (limit: 2319)
> >          CGroup: /system.slice/mailscanner.service
> >                  ??4052 MSMilter Daemon
> >                  ??4056 MSMilter Daemon
> >                  ??4057 MSMilter Daemon
> >                  ??4058 MSMilter Daemon
> >                  ??4059 MSMilter Daemon
> >                  ??4060 MSMilter Daemon
> >
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Reading configuration
> >     file /etc/MailScanner/conf.d/README
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Reading configuration
> >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Configuration: Seen
> >     configuration file /etc/MailScanner/conf.d/README before, skipping.
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Configuration: Seen
> >     configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf
> before,
> >     skipping.
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Value of lockfiledir
> >     cannot be a ruleset, only a simple value
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Read 1500 hostnames
> >     from the phishing whitelist
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     MSMilter[3983]: Read 16624 hostnames
> >     from the phishing blacklists
> >     Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     root[4053]: MSMilter started
> >     Oct 25 15:12:10 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     msmilter-init[3970]: MSMilter started
> >     with process id 4052
> >     Oct 25 15:12:10 lab.mksoft.co.il <http://lab.mksoft.co.il>
> >     systemd[1]: Started LSB: MSMilter daemon.
> >
> >
> >
> >
> >
> >
> >     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:15:
> >      > yes, root is ok
> >      >
> >      > On Thu, Oct 25, 2018 at 8:13 AM Koby Peleg Hen <koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>
> >      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
> >      >
> >      >
> >      >     I install it as root , it is ok ?
> >      >
> >      >
> >      >     ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ????
> >     15:08:
> >      >      > Negative.
> >      >      >
> >      >      > We better try again, with fresh copies...
> >      >      >
> >      >      > sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
> >      >      > sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
> >      >      > curl
> >      >      >
> >      >
> >
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd
> >      >
> >      >      > | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
> >      >      > curl
> >      >      >
> >      >
> >
> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter
> >      >
> >      >      > | sudo tee /usr/lib/MailScanner/systemd/ms-milter
> >      >      > sudo systemctl stop mailscanner.service
> >      >      > sudo systemctl stop msmilter.service
> >      >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> >      >      > /lib/systemd/system/mailscanner.service
> >      >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> >      >      > /lib/systemd/system/msmilter.service
> >      >      > sudo systemctl daemon-reload
> >      >      > sudo systemctl enable mailscanner.service
> >      >      > sudo systemctl enable msmilter.service
> >      >      > sudo systemctl start mailscanner.service
> >      >      > sudo systemctl start msmilter.service
> >      >      >
> >      >      > On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen
> >     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >      >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >      >      > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>> wrote:
> >      >      >
> >      >      >     I did that and thsi is the output.
> >      >      >
> >      >      >     ? mailscanner.service - LSB: MSMilter daemon
> >      >      >          Loaded: loaded
> >     (/usr/lib/MailScanner/init/msmilter-init;
> >      >     enabled;
> >      >      >     vendor preset: enabled)
> >      >      >          Active: active (running) since Thu 2018-10-25
> >     15:00:41
> >      >     IDT; 16s ago
> >      >      >            Docs: man:systemd-sysv-generator(8)
> >      >      >         Process: 2970
> >      >     ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >      >      >     start
> >      >      >     (code=exited, status=0/SUCCESS)
> >      >      >        Main PID: 2988 (MSMilter Daemon)
> >      >      >           Tasks: 6 (limit: 2319)
> >      >      >          CGroup: /system.slice/mailscanner.service
> >      >      >                  ??2988 MSMilter Daemon
> >      >      >                  ??2992 MSMilter Daemon
> >      >      >                  ??2993 MSMilter Daemon
> >      >      >                  ??2994 MSMilter Daemon
> >      >      >                  ??2995 MSMilter Daemon
> >      >      >                  ??2996 MSMilter Daemon
> >      >      >
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Reading configuration
> >      >      >     file /etc/MailScanner/conf.d/README
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Reading configuration
> >      >      >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Configuration: Seen
> >      >      >     configuration file /etc/MailScanner/conf.d/README
> before,
> >      >     skipping.
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Configuration: Seen
> >      >      >     configuration file
> >      >     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> >      >      >     skipping.
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Value of lockfiledir
> >      >      >     cannot be a ruleset, only a simple value
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Read 1500 hostnames
> >      >      >     from the phishing whitelist
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     MSMilter[2983]: Read 16624 hostnames
> >      >      >     from the phishing blacklists
> >      >      >     Oct 25 15:00:40 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     root[2989]: MSMilter started
> >      >      >     Oct 25 15:00:41 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     msmilter-init[2970]: MSMilter started
> >      >      >     with process id 2988
> >      >      >     Oct 25 15:00:41 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il>
> >      >      >     systemd[1]: Started LSB: MSMilter daemon.
> >      >      >
> >      >      >     Is it Ok now ?
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >     ???? ?? ??? Shawn Iverson via MailScanner,
> >     ??25.10.2018 ????
> >      >     14:56:
> >      >      >      > Something is not right here.  mailscanner.service
> >     should
> >      >     not be
> >      >      >     pointing
> >      >      >      > to msmilter-init
> >      >      >      >
> >      >      >      > Try this....
> >      >      >      >
> >      >      >      > sudo systemctl stop mailscanner.service
> >      >      >      > sudo systemctl stop msmilter.service
> >      >      >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-systemd
> >      >      >      > /lib/systemd/system/mailscanner.service
> >      >      >      > sudo cp -f /usr/lib/MailScanner/systemd/ms-milter
> >      >      >      > /lib/systemd/system/msmilter.service
> >      >      >      > sudo systemctl daemon-reload
> >      >      >      > sudo systemctl enable mailscanner.service
> >      >      >      > sudo systemctl enable msmilter.service
> >      >      >      > sudo systemctl start mailscanner.service
> >      >      >      > sudo systemctl start msmilter.service
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen
> >      >     <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
> >      >      >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>
> >      >      >      > <mailto:koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il> <mailto:koby at mksoft.co.il
> >     <mailto:koby at mksoft.co.il>>
> >      >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
> >     <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>>> wrote:
> >      >      >      >
> >      >      >      >
> >      >      >      >     ? mailscanner.service - LSB: MSMilter daemon
> >      >      >      >          Loaded: loaded
> >      >     (/usr/lib/MailScanner/init/msmilter-init;
> >      >      >     enabled;
> >      >      >      >     vendor preset: enabled)
> >      >      >      >          Active: active (running) since Thu
> 2018-10-25
> >      >     14:44:44
> >      >      >     IDT; 19s ago
> >      >      >      >            Docs: man:systemd-sysv-generator(8)
> >      >      >      >         Process: 2366
> >      >      >     ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> >      >      >      >     (code=exited, status=0/SUCCESS)
> >      >      >      >         Process: 2383
> >      >      >     ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >      >      >      >     start
> >      >      >      >     (code=exited, status=0/SUCCESS)
> >      >      >      >        Main PID: 2492 (MSMilter Daemon)
> >      >      >      >           Tasks: 6 (limit: 2319)
> >      >      >      >          CGroup: /system.slice/mailscanner.service
> >      >      >      >                  ??2492 MSMilter Daemon
> >      >      >      >                  ??2496 MSMilter Daemon
> >      >      >      >                  ??2497 MSMilter Daemon
> >      >      >      >                  ??2498 MSMilter Daemon
> >      >      >      >                  ??2499 MSMilter Daemon
> >      >      >      >                  ??2500 MSMilter Daemon
> >      >      >      >
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Reading configuration
> >      >      >      >     file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Configuration: Seen
> >      >      >      >     configuration file
> >     /etc/MailScanner/conf.d/README before,
> >      >      >     skipping.
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Configuration: Seen
> >      >      >      >     configuration file
> >      >      >     /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> >      >      >      >     skipping.
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Could not read
> >      >      >      >     directory /var/spool/MailScanner/incoming/Locks
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Error in configuration
> >      >      >      >     file line 3103, directory
> >      >      >     /var/spool/MailScanner/incoming/Locks for
> >      >      >      >     lockfiledir does not exist (or is not readable)
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Read 1500 hostnames
> >      >      >      >     from the phishing whitelist
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     MSMilter[2396]: Read 16624 hostnames
> >      >      >      >     from the phishing blacklists
> >      >      >      >     Oct 25 14:44:43 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     root[2494]: MSMilter started
> >      >      >      >     Oct 25 14:44:44 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     msmilter-init[2383]: MSMilter started
> >      >      >      >     with process id 2492
> >      >      >      >     Oct 25 14:44:44 lab.mksoft.co.il
> >     <http://lab.mksoft.co.il>
> >      >     <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
> >      >      >     <http://lab.mksoft.co.il>
> >      >      >      >     systemd[1]: Started LSB: MSMilter daemon.
> >      >      >      >
> >      >      >      >
> >      >      >      >     --
> >      >      >      >     MailScanner mailing list
> >      >      >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>>
> >      >      >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>>>
> >      >      >      >
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      > --
> >      >      >      > Shawn Iverson, CETL
> >      >      >      > Director of Technology
> >      >      >      > Rush County Schools
> >      >      >      > 765-932-3901 option 7
> >      >      >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>>
> >      >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>>>
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >      >
> >      >      >
> >      >      >
> >      >      >     --
> >      >      >     MailScanner mailing list
> >      >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>>
> >      >      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >      >
> >      >      >
> >      >      >
> >      >      > --
> >      >      > Shawn Iverson, CETL
> >      >      > Director of Technology
> >      >      > Rush County Schools
> >      >      > 765-932-3901 option 7
> >      >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >      >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>>
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >      >
> >      >
> >      >
> >      >     --
> >      >     MailScanner mailing list
> >      > mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >      >     <mailto:mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>>
> >      > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >      >
> >      >
> >      >
> >      > --
> >      > Shawn Iverson, CETL
> >      > Director of Technology
> >      > Rush County Schools
> >      > 765-932-3901 option 7
> >      > iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>
> >     <mailto:iversons at rushville.k12.in.us
> >     <mailto:iversons at rushville.k12.in.us>>
> >      >
> >      >
> >      >
> >      >
> >      >
> >
> >
> >     --
> >     MailScanner mailing list
> >     mailscanner at lists.mailscanner.info
> >     <mailto:mailscanner at lists.mailscanner.info>
> >     http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> >
> > --
> > Shawn Iverson, CETL
> > Director of Technology
> > Rush County Schools
> > 765-932-3901 option 7
> > iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/51f42e2c/attachment.html>

From koby at mksoft.co.il  Thu Oct 25 12:29:47 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 15:29:47 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <1029420f-5f93-83b9-f0b2-e2f7c32ca875@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <CABu_8zKFLp4yQp_Jue_M7c7-L=oEVyH-Wjq2LPN3eMZ_xnvGMg@mail.gmail.com>
 <68005671-d769-9bce-6dcb-a4c82666ffab@mksoft.co.il>
 <CABu_8z+Uqm4kgmXLBVYVdP91RZ7pd-s1f9kE4hx7TvX3xiVZAw@mail.gmail.com>
 <b9413da2-affe-9711-d12a-3014830bb9a7@mksoft.co.il>
 <CABu_8zKSWnBo04sLO9PW_8xXLwNTxpuM3t4hYO0Lz8r0ocgX9w@mail.gmail.com>
 <bcfb2bed-dcd8-0b61-3c39-f0fff76608f0@mksoft.co.il>
 <CABu_8z+JMQX_cBeEa-6uBA6sOijssn2EoiOKk-p3_=zvtEjgxQ@mail.gmail.com>
 <1029420f-5f93-83b9-f0b2-e2f7c32ca875@mksoft.co.il>
Message-ID: <71aedf16-ef33-031c-5439-eb8a1089411f@mksoft.co.il>

You wont believe ....
I comment out the mariadb and all the mail get to the target....



???? ?? ??? Koby Peleg Hen, ??25.10.2018 ???? 15:26:
> This is the file in my vm :
> 
> [Unit]
> Description=LSB: MailScanner daemon
> Documentation=man:systemd-sysv-generator(8)
> SourcePath=/usr/lib/MailScanner/init/ms-init
> After=network-online.target remote-fs.target rsyslog.service 
> mariadb.service
> Wants=network-online.target mariadb.service
> 
> [Service]
> Type=forking
> Restart=no
> TimeoutSec=1min
> IgnoreSIGPIPE=no
> KillMode=process
> GuessMainPID=no
> RemainAfterExit=yes
> ExecStart=/usr/lib/MailScanner/init/ms-init start
> ExecStop=/usr/lib/MailScanner/init/ms-init stop
> EnvironmentFile=-/etc/MailScanner/defaults
> PIDFile=/var/run/MailScanner.pid
> 
> [Install]
> WantedBy=multi-user.target
> 
> 
> 
> I notice that is looking for mariadb ...
> Well i dont have it installed
> 
> 
> 
> 
> 
> ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:22:
>> Wow, this is strange.
>>
>> The contents of /lib/systemd/system/mailscanner.service should be this:
>>
>> [Unit]
>> ????Description=LSB: MailScanner daemon
>> ????Documentation=man:systemd-sysv-generator(8)
>> ????SourcePath=/usr/lib/MailScanner/init/ms-init
>> ????After=network-online.target remote-fs.target rsyslog.service 
>> mariadb.service
>> ????Wants=network-online.target mariadb.service
>>
>> ????[Service]
>> ????Type=forking
>> ????Restart=no
>> ????TimeoutSec=1min
>> ????IgnoreSIGPIPE=no
>> ????KillMode=process
>> ????GuessMainPID=no
>> ????RemainAfterExit=yes
>> ????ExecStart=/usr/lib/MailScanner/init/ms-init start
>> ????ExecStop=/usr/lib/MailScanner/init/ms-init stop
>> ????EnvironmentFile=-/etc/MailScanner/defaults
>> ????PIDFile=/var/run/MailScanner.pid
>>
>> ????[Install]
>> ????WantedBy=multi-user.target
>>
>>
>> Is this what you see in the file?
>>
>>
>>
>> On Thu, Oct 25, 2018 at 8:20 AM Koby Peleg Hen <koby at mksoft.co.il 
>> <mailto:koby at mksoft.co.il>> wrote:
>>
>>
>> ??? I did what you say ,
>> ??? here is the output ,
>>
>> ??? root at lab:~# systemctl status mailscanner.service -l
>> ??? ? mailscanner.service - LSB: MSMilter daemon
>> ???? ? ? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; 
>> enabled;
>> ??? vendor preset: enabled)
>> ???? ? ? Active: active (running) since Thu 2018-10-25 15:12:10 IDT;
>> ??? 6min ago
>> ???? ? ? ? Docs: man:systemd-sysv-generator(8)
>> ???? ? ?Process: 3970 ExecStart=/usr/lib/MailScanner/init/msmilter-init
>> ??? start
>> ??? (code=exited, status=0/SUCCESS)
>> ???? ? Main PID: 4052 (MSMilter Daemon)
>> ???? ? ? ?Tasks: 6 (limit: 2319)
>> ???? ? ? CGroup: /system.slice/mailscanner.service
>> ???? ? ? ? ? ? ? ??4052 MSMilter Daemon
>> ???? ? ? ? ? ? ? ??4056 MSMilter Daemon
>> ???? ? ? ? ? ? ? ??4057 MSMilter Daemon
>> ???? ? ? ? ? ? ? ??4058 MSMilter Daemon
>> ???? ? ? ? ? ? ? ??4059 MSMilter Daemon
>> ???? ? ? ? ? ? ? ??4060 MSMilter Daemon
>>
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Reading configuration
>> ??? file /etc/MailScanner/conf.d/README
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Reading configuration
>> ??? file /etc/MailScanner/conf.d/SmgMailScanner.conf
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Configuration: Seen
>> ??? configuration file /etc/MailScanner/conf.d/README before, skipping.
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Configuration: Seen
>> ??? configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf 
>> before,
>> ??? skipping.
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Value of lockfiledir
>> ??? cannot be a ruleset, only a simple value
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Read 1500 hostnames
>> ??? from the phishing whitelist
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? MSMilter[3983]: Read 16624 hostnames
>> ??? from the phishing blacklists
>> ??? Oct 25 15:12:09 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? root[4053]: MSMilter started
>> ??? Oct 25 15:12:10 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? msmilter-init[3970]: MSMilter started
>> ??? with process id 4052
>> ??? Oct 25 15:12:10 lab.mksoft.co.il <http://lab.mksoft.co.il>
>> ??? systemd[1]: Started LSB: MSMilter daemon.
>>
>>
>>
>>
>>
>>
>> ??? ???? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ???? 15:15:
>> ???? > yes, root is ok
>> ???? >
>> ???? > On Thu, Oct 25, 2018 at 8:13 AM Koby Peleg Hen <koby at mksoft.co.il
>> ??? <mailto:koby at mksoft.co.il>
>> ???? > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>> wrote:
>> ???? >
>> ???? >
>> ???? >? ? ?I install it as root , it is ok ?
>> ???? >
>> ???? >
>> ???? >? ? ????? ?? ??? Shawn Iverson via MailScanner, ??25.10.2018 ????
>> ??? 15:08:
>> ???? >? ? ? > Negative.
>> ???? >? ? ? >
>> ???? >? ? ? > We better try again, with fresh copies...
>> ???? >? ? ? >
>> ???? >? ? ? > sudo rm -f /usr/lib/MailScanner/systemd/ms-systemd
>> ???? >? ? ? > sudo rm -f /usr/lib/MailScanner/systemd/ms-milter
>> ???? >? ? ? > curl
>> ???? >? ? ? >
>> ???? >
>>     
>> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-systemd 
>>
>> ???? >
>> ???? >? ? ? > | sudo tee /usr/lib/MailScanner/systemd/ms-systemd
>> ???? >? ? ? > curl
>> ???? >? ? ? >
>> ???? >
>>     
>> https://raw.githubusercontent.com/MailScanner/v5/master/common/usr/lib/MailScanner/systemd/ms-milter 
>>
>> ???? >
>> ???? >? ? ? > | sudo tee /usr/lib/MailScanner/systemd/ms-milter
>> ???? >? ? ? > sudo systemctl stop mailscanner.service
>> ???? >? ? ? > sudo systemctl stop msmilter.service
>> ???? >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>> ???? >? ? ? > /lib/systemd/system/mailscanner.service
>> ???? >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>> ???? >? ? ? > /lib/systemd/system/msmilter.service
>> ???? >? ? ? > sudo systemctl daemon-reload
>> ???? >? ? ? > sudo systemctl enable mailscanner.service
>> ???? >? ? ? > sudo systemctl enable msmilter.service
>> ???? >? ? ? > sudo systemctl start mailscanner.service
>> ???? >? ? ? > sudo systemctl start msmilter.service
>> ???? >? ? ? >
>> ???? >? ? ? > On Thu, Oct 25, 2018 at 8:02 AM Koby Peleg Hen
>> ??? <koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>> ???? >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>> ???? >? ? ? > <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>> ??? <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>> wrote:
>> ???? >? ? ? >
>> ???? >? ? ? >? ? ?I did that and thsi is the output.
>> ???? >? ? ? >
>> ???? >? ? ? >? ? ?? mailscanner.service - LSB: MSMilter daemon
>> ???? >? ? ? >? ? ? ? ? Loaded: loaded
>> ??? (/usr/lib/MailScanner/init/msmilter-init;
>> ???? >? ? ?enabled;
>> ???? >? ? ? >? ? ?vendor preset: enabled)
>> ???? >? ? ? >? ? ? ? ? Active: active (running) since Thu 2018-10-25
>> ??? 15:00:41
>> ???? >? ? ?IDT; 16s ago
>> ???? >? ? ? >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>> ???? >? ? ? >? ? ? ? ?Process: 2970
>> ???? >? ? ?ExecStart=/usr/lib/MailScanner/init/msmilter-init
>> ???? >? ? ? >? ? ?start
>> ???? >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>> ???? >? ? ? >? ? ? ? Main PID: 2988 (MSMilter Daemon)
>> ???? >? ? ? >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>> ???? >? ? ? >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>> ???? >? ? ? >? ? ? ? ? ? ? ? ? ??2988 MSMilter Daemon
>> ???? >? ? ? >? ? ? ? ? ? ? ? ? ??2992 MSMilter Daemon
>> ???? >? ? ? >? ? ? ? ? ? ? ? ? ??2993 MSMilter Daemon
>> ???? >? ? ? >? ? ? ? ? ? ? ? ? ??2994 MSMilter Daemon
>> ???? >? ? ? >? ? ? ? ? ? ? ? ? ??2995 MSMilter Daemon
>> ???? >? ? ? >? ? ? ? ? ? ? ? ? ??2996 MSMilter Daemon
>> ???? >? ? ? >
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Reading configuration
>> ???? >? ? ? >? ? ?file /etc/MailScanner/conf.d/README
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Reading configuration
>> ???? >? ? ? >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Configuration: Seen
>> ???? >? ? ? >? ? ?configuration file /etc/MailScanner/conf.d/README 
>> before,
>> ???? >? ? ?skipping.
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Configuration: Seen
>> ???? >? ? ? >? ? ?configuration file
>> ???? >? ? ?/etc/MailScanner/conf.d/SmgMailScanner.conf before,
>> ???? >? ? ? >? ? ?skipping.
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Value of lockfiledir
>> ???? >? ? ? >? ? ?cannot be a ruleset, only a simple value
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Read 1500 hostnames
>> ???? >? ? ? >? ? ?from the phishing whitelist
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?MSMilter[2983]: Read 16624 hostnames
>> ???? >? ? ? >? ? ?from the phishing blacklists
>> ???? >? ? ? >? ? ?Oct 25 15:00:40 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?root[2989]: MSMilter started
>> ???? >? ? ? >? ? ?Oct 25 15:00:41 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?msmilter-init[2970]: MSMilter started
>> ???? >? ? ? >? ? ?with process id 2988
>> ???? >? ? ? >? ? ?Oct 25 15:00:41 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>> ???? >? ? ? >
>> ???? >? ? ? >? ? ?Is it Ok now ?
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >? ? ????? ?? ??? Shawn Iverson via MailScanner,
>> ??? ??25.10.2018 ????
>> ???? >? ? ?14:56:
>> ???? >? ? ? >? ? ? > Something is not right here.? mailscanner.service
>> ??? should
>> ???? >? ? ?not be
>> ???? >? ? ? >? ? ?pointing
>> ???? >? ? ? >? ? ? > to msmilter-init
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? > Try this....
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? > sudo systemctl stop mailscanner.service
>> ???? >? ? ? >? ? ? > sudo systemctl stop msmilter.service
>> ???? >? ? ? >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-systemd
>> ???? >? ? ? >? ? ? > /lib/systemd/system/mailscanner.service
>> ???? >? ? ? >? ? ? > sudo cp -f?/usr/lib/MailScanner/systemd/ms-milter
>> ???? >? ? ? >? ? ? > /lib/systemd/system/msmilter.service
>> ???? >? ? ? >? ? ? > sudo systemctl daemon-reload
>> ???? >? ? ? >? ? ? > sudo systemctl enable mailscanner.service
>> ???? >? ? ? >? ? ? > sudo systemctl enable msmilter.service
>> ???? >? ? ? >? ? ? > sudo systemctl start mailscanner.service
>> ???? >? ? ? >? ? ? > sudo systemctl start msmilter.service
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? > On Thu, Oct 25, 2018 at 7:46 AM Koby Peleg Hen
>> ???? >? ? ?<koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>> ??? <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>
>> ???? >? ? ? >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>> ??? <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>
>> ???? >? ? ? >? ? ? > <mailto:koby at mksoft.co.il
>> ??? <mailto:koby at mksoft.co.il> <mailto:koby at mksoft.co.il
>> ??? <mailto:koby at mksoft.co.il>>
>> ???? >? ? ?<mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>
>> ??? <mailto:koby at mksoft.co.il <mailto:koby at mksoft.co.il>>>>> wrote:
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >? ? ?? mailscanner.service - LSB: MSMilter daemon
>> ???? >? ? ? >? ? ? >? ? ? ? ? Loaded: loaded
>> ???? >? ? ?(/usr/lib/MailScanner/init/msmilter-init;
>> ???? >? ? ? >? ? ?enabled;
>> ???? >? ? ? >? ? ? >? ? ?vendor preset: enabled)
>> ???? >? ? ? >? ? ? >? ? ? ? ? Active: active (running) since Thu 
>> 2018-10-25
>> ???? >? ? ?14:44:44
>> ???? >? ? ? >? ? ?IDT; 19s ago
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? Docs: man:systemd-sysv-generator(8)
>> ???? >? ? ? >? ? ? >? ? ? ? ?Process: 2366
>> ???? >? ? ? >? ? ?ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
>> ???? >? ? ? >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>> ???? >? ? ? >? ? ? >? ? ? ? ?Process: 2383
>> ???? >? ? ? >? ? ?ExecStart=/usr/lib/MailScanner/init/msmilter-init
>> ???? >? ? ? >? ? ? >? ? ?start
>> ???? >? ? ? >? ? ? >? ? ?(code=exited, status=0/SUCCESS)
>> ???? >? ? ? >? ? ? >? ? ? ? Main PID: 2492 (MSMilter Daemon)
>> ???? >? ? ? >? ? ? >? ? ? ? ? ?Tasks: 6 (limit: 2319)
>> ???? >? ? ? >? ? ? >? ? ? ? ? CGroup: /system.slice/mailscanner.service
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2492 MSMilter Daemon
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2496 MSMilter Daemon
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2497 MSMilter Daemon
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2498 MSMilter Daemon
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2499 MSMilter Daemon
>> ???? >? ? ? >? ? ? >? ? ? ? ? ? ? ? ? ??2500 MSMilter Daemon
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Reading configuration
>> ???? >? ? ? >? ? ? >? ? ?file /etc/MailScanner/conf.d/SmgMailScanner.conf
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Configuration: Seen
>> ???? >? ? ? >? ? ? >? ? ?configuration file
>> ??? /etc/MailScanner/conf.d/README before,
>> ???? >? ? ? >? ? ?skipping.
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Configuration: Seen
>> ???? >? ? ? >? ? ? >? ? ?configuration file
>> ???? >? ? ? >? ? ?/etc/MailScanner/conf.d/SmgMailScanner.conf before,
>> ???? >? ? ? >? ? ? >? ? ?skipping.
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Could not read
>> ???? >? ? ? >? ? ? >? ? ?directory /var/spool/MailScanner/incoming/Locks
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Error in configuration
>> ???? >? ? ? >? ? ? >? ? ?file line 3103, directory
>> ???? >? ? ? >? ? ?/var/spool/MailScanner/incoming/Locks for
>> ???? >? ? ? >? ? ? >? ? ?lockfiledir does not exist (or is not readable)
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Read 1500 hostnames
>> ???? >? ? ? >? ? ? >? ? ?from the phishing whitelist
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?MSMilter[2396]: Read 16624 hostnames
>> ???? >? ? ? >? ? ? >? ? ?from the phishing blacklists
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:43 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?root[2494]: MSMilter started
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:44 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?msmilter-init[2383]: MSMilter started
>> ???? >? ? ? >? ? ? >? ? ?with process id 2492
>> ???? >? ? ? >? ? ? >? ? ?Oct 25 14:44:44 lab.mksoft.co.il
>> ??? <http://lab.mksoft.co.il>
>> ???? >? ? ?<http://lab.mksoft.co.il> <http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ?<http://lab.mksoft.co.il>
>> ???? >? ? ? >? ? ? >? ? ?systemd[1]: Started LSB: MSMilter daemon.
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >? ? ?--
>> ???? >? ? ? >? ? ? >? ? ?MailScanner mailing list
>> ???? >? ? ? >? ? ? > mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>
>> ???? >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>>
>> ???? >? ? ? >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>
>> ???? >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>>>
>> ???? >? ? ? >? ? ? >
>> ??? http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? > --
>> ???? >? ? ? >? ? ? > Shawn Iverson, CETL
>> ???? >? ? ? >? ? ? > Director of Technology
>> ???? >? ? ? >? ? ? > Rush County Schools
>> ???? >? ? ? >? ? ? > 765-932-3901 option 7
>> ???? >? ? ? >? ? ? > iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>
>> ???? >? ? ? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>>
>> ???? >? ? ? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>
>> ???? >? ? ? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>>>
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >? ? ?--
>> ???? >? ? ? >? ? ?MailScanner mailing list
>> ???? >? ? ? > mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>
>> ???? >? ? ? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>>
>> ???? >? ? ? > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? > --
>> ???? >? ? ? > Shawn Iverson, CETL
>> ???? >? ? ? > Director of Technology
>> ???? >? ? ? > Rush County Schools
>> ???? >? ? ? > 765-932-3901 option 7
>> ???? >? ? ? > iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ???? >? ? ?<mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>>
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >? ? ? >
>> ???? >
>> ???? >
>> ???? >? ? ?--
>> ???? >? ? ?MailScanner mailing list
>> ???? > mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ???? >? ? ?<mailto:mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>>
>> ???? > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> ???? >
>> ???? >
>> ???? >
>> ???? > --
>> ???? > Shawn Iverson, CETL
>> ???? > Director of Technology
>> ???? > Rush County Schools
>> ???? > 765-932-3901 option 7
>> ???? > iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>
>> ??? <mailto:iversons at rushville.k12.in.us
>> ??? <mailto:iversons at rushville.k12.in.us>>
>> ???? >
>> ???? >
>> ???? >
>> ???? >
>> ???? >
>>
>>
>> ??? -- ??? MailScanner mailing list
>> ??? mailscanner at lists.mailscanner.info
>> ??? <mailto:mailscanner at lists.mailscanner.info>
>> ??? http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>>
>> -- 
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 option 7
>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>>
>>
>>
>>
>>
> 
> 

From koby at mksoft.co.il  Thu Oct 25 12:33:12 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Thu, 25 Oct 2018 15:33:12 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <5b2263e6-88ea-db9a-3956-125806b3313f@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <5b2263e6-88ea-db9a-3956-125806b3313f@mksoft.co.il>
Message-ID: <6b2b339a-0e55-faaa-96dc-8add2f9b19ff@mksoft.co.il>

Now after I comment out the mariyadb on the systemsd file
the system is scanning mail ...
Thank you for your co operation and support.
Maybe this maria shuold stay out at list for the ubuntu users ?


???? ?? ??? Koby Peleg Hen, ??25.10.2018 ???? 14:57:
> I thing I found some thing,
> there is no file name Locks under the following dir 
> /var/spool/MailScanner/incoming
> so I added it and now no error.
> root at lab:/var/spool/MailScanner/incoming# systemctl status mailscanner -l
> ? mailscanner.service - LSB: MSMilter daemon
>  ?? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
> vendor preset: enabled)
>  ?? Active: active (running) since Thu 2018-10-25 14:53:17 IDT; 3min 9s ago
>  ???? Docs: man:systemd-sysv-generator(8)
>  ? Process: 2672 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
> (code=exited, status=0/SUCCESS)
>  ? Process: 2689 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
> (code=exited, status=0/SUCCESS)
>  ?Main PID: 2706 (MSMilter Daemon)
>  ??? Tasks: 6 (limit: 2319)
>  ?? CGroup: /system.slice/mailscanner.service
>  ?????????? ??2706 MSMilter Daemon
>  ?????????? ??2710 MSMilter Daemon
>  ?????????? ??2711 MSMilter Daemon
>  ?????????? ??2712 MSMilter Daemon
>  ?????????? ??2713 MSMilter Daemon
>  ?????????? ??2714 MSMilter Daemon
> 
> But still no scannig...
> 
> 
> 
> 
> 
> 
> 
> 
> ???? ?? ??? Koby Peleg Hen, ??25.10.2018 ???? 14:46:
>>
>> ? mailscanner.service - LSB: MSMilter daemon
>> ??? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
>> vendor preset: enabled)
>> ??? Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
>> ????? Docs: man:systemd-sysv-generator(8)
>> ?? Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
>> (code=exited, status=0/SUCCESS)
>> ?? Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init 
>> start (code=exited, status=0/SUCCESS)
>> ??Main PID: 2492 (MSMilter Daemon)
>> ???? Tasks: 6 (limit: 2319)
>> ??? CGroup: /system.slice/mailscanner.service
>> ??????????? ??2492 MSMilter Daemon
>> ??????????? ??2496 MSMilter Daemon
>> ??????????? ??2497 MSMilter Daemon
>> ??????????? ??2498 MSMilter Daemon
>> ??????????? ??2499 MSMilter Daemon
>> ??????????? ??2500 MSMilter Daemon
>>
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Reading configuration 
>> file /etc/MailScanner/conf.d/SmgMailScanner.conf
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
>> configuration file /etc/MailScanner/conf.d/README before, skipping.
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
>> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before, 
>> skipping.
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Could not read 
>> directory /var/spool/MailScanner/incoming/Locks
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Error in 
>> configuration file line 3103, directory 
>> /var/spool/MailScanner/incoming/Locks for lockfiledir does not exist 
>> (or is not readable)
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 1500 hostnames 
>> from the phishing whitelist
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 16624 hostnames 
>> from the phishing blacklists
>> Oct 25 14:44:43 lab.mksoft.co.il root[2494]: MSMilter started
>> Oct 25 14:44:44 lab.mksoft.co.il msmilter-init[2383]: MSMilter started 
>> with process id 2492
>> Oct 25 14:44:44 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter 
>> daemon.
>>
>>
> 
> 

From iversons at rushville.k12.in.us  Thu Oct 25 12:34:19 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Thu, 25 Oct 2018 08:34:19 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <6b2b339a-0e55-faaa-96dc-8add2f9b19ff@mksoft.co.il>
References: <9042ecd8-c835-607b-6c78-7cce74a7c16f@mksoft.co.il>
 <819ecf75-8d7e-74f2-9a3b-b80dc213ba92@B0x.nl>
 <0e2ff6fa-420f-6918-954b-5ddd26799f49@mksoft.co.il>
 <CABu_8zJ_oZ3csCKWmTDupB-2Wp2bddQ-4K90_iwxqU1AQ9v=8Q@mail.gmail.com>
 <df9927d7-8456-fa71-2071-4a5cac192bb3@mksoft.co.il>
 <CABu_8zJ3s7FcWdWCCo53D_sNysggf7NX-JpNyvKYRSizKQLyzQ@mail.gmail.com>
 <85e5caee-c567-2d53-1c6c-df4eff3fb269@mksoft.co.il>
 <CABu_8z+Pp33qLFTAeQHjFD9ZhiEfHLOVqNxeSyF3LtRLe_jEFg@mail.gmail.com>
 <0db40d15-b867-a351-8b88-71305a936eab@mksoft.co.il>
 <CABu_8zLpEnsKdWozXPVk3QwYPSEL6TyX6YGxAPjsvq36Ew6owQ@mail.gmail.com>
 <810f4979-d17a-e0a5-6501-496bcbfd96c5@mksoft.co.il>
 <5b2263e6-88ea-db9a-3956-125806b3313f@mksoft.co.il>
 <6b2b339a-0e55-faaa-96dc-8add2f9b19ff@mksoft.co.il>
Message-ID: <CABu_8zJFzhcgmQ+JR9eCP=Su4iBWSrUJ7bz6mSq_iG60sX7g6w@mail.gmail.com>

I'm not so sure that was the root cause, but I'll run tests on my end, just
to be sure.

On Thu, Oct 25, 2018 at 8:33 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Now after I comment out the mariyadb on the systemsd file
> the system is scanning mail ...
> Thank you for your co operation and support.
> Maybe this maria shuold stay out at list for the ubuntu users ?
>
>
> ???? ?? ??? Koby Peleg Hen, ??25.10.2018 ???? 14:57:
> > I thing I found some thing,
> > there is no file name Locks under the following dir
> > /var/spool/MailScanner/incoming
> > so I added it and now no error.
> > root at lab:/var/spool/MailScanner/incoming# systemctl status mailscanner
> -l
> > ? mailscanner.service - LSB: MSMilter daemon
> >     Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
> > vendor preset: enabled)
> >     Active: active (running) since Thu 2018-10-25 14:53:17 IDT; 3min 9s
> ago
> >       Docs: man:systemd-sysv-generator(8)
> >    Process: 2672 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> > (code=exited, status=0/SUCCESS)
> >    Process: 2689 ExecStart=/usr/lib/MailScanner/init/msmilter-init start
> > (code=exited, status=0/SUCCESS)
> >   Main PID: 2706 (MSMilter Daemon)
> >      Tasks: 6 (limit: 2319)
> >     CGroup: /system.slice/mailscanner.service
> >             ??2706 MSMilter Daemon
> >             ??2710 MSMilter Daemon
> >             ??2711 MSMilter Daemon
> >             ??2712 MSMilter Daemon
> >             ??2713 MSMilter Daemon
> >             ??2714 MSMilter Daemon
> >
> > But still no scannig...
> >
> >
> >
> >
> >
> >
> >
> >
> > ???? ?? ??? Koby Peleg Hen, ??25.10.2018 ???? 14:46:
> >>
> >> ? mailscanner.service - LSB: MSMilter daemon
> >>     Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
> >> vendor preset: enabled)
> >>     Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
> >>       Docs: man:systemd-sysv-generator(8)
> >>    Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> >> (code=exited, status=0/SUCCESS)
> >>    Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init
> >> start (code=exited, status=0/SUCCESS)
> >>   Main PID: 2492 (MSMilter Daemon)
> >>      Tasks: 6 (limit: 2319)
> >>     CGroup: /system.slice/mailscanner.service
> >>             ??2492 MSMilter Daemon
> >>             ??2496 MSMilter Daemon
> >>             ??2497 MSMilter Daemon
> >>             ??2498 MSMilter Daemon
> >>             ??2499 MSMilter Daemon
> >>             ??2500 MSMilter Daemon
> >>
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Reading configuration
> >> file /etc/MailScanner/conf.d/SmgMailScanner.conf
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen
> >> configuration file /etc/MailScanner/conf.d/README before, skipping.
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen
> >> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> >> skipping.
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Could not read
> >> directory /var/spool/MailScanner/incoming/Locks
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Error in
> >> configuration file line 3103, directory
> >> /var/spool/MailScanner/incoming/Locks for lockfiledir does not exist
> >> (or is not readable)
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 1500 hostnames
> >> from the phishing whitelist
> >> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 16624 hostnames
> >> from the phishing blacklists
> >> Oct 25 14:44:43 lab.mksoft.co.il root[2494]: MSMilter started
> >> Oct 25 14:44:44 lab.mksoft.co.il msmilter-init[2383]: MSMilter started
> >> with process id 2492
> >> Oct 25 14:44:44 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter
> >> daemon.
> >>
> >>
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/5c509387/attachment.html>

From belle at bazuin.nl  Thu Oct 25 14:10:45 2018
From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=)
Date: Thu, 25 Oct 2018 16:10:45 +0200
Subject: MailScanner 5.1.2 not working
In-Reply-To: <CABu_8zJFzhcgmQ+JR9eCP=Su4iBWSrUJ7bz6mSq_iG60sX7g6w@mail.gmail.com>
References: <6b2b339a-0e55-faaa-96dc-8add2f9b19ff@mksoft.co.il>
Message-ID: <vmime.5bd1cee5.2919.213c8a43d9934b5@ms249-lin-003.rotterdam.bazuin.nl>

??? @Koby, 
?
type : systemctl edit mailscanner.service
And you get a clean page, that is the file : /etc/systemd/system/mailscanner.service.d/override.conf being created. 
?
I've optimized the start order to my setup and same should Koby do. 
Create an override and remove the mariadb.service in that setup. 
?
?
This is my personal override.? 
# /etc/systemd/system/mailscanner.service.d/override.conf
[Unit]
After=network-online.target remote-fs.target rsyslog.service mariadb.service postfix.service clamav-daemon.service
Wants=network-online.target mariadb.service postfix.service clamav-daemon.service

@Shawn, 
In the example, you posted, remove maridb.service from Wanted. 
having it in After should be sufficient. 
?
?
Greetz, 
?
Louis
?
?
Van: MailScanner [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.info] Namens Shawn Iverson via MailScanner
Verzonden: donderdag 25 oktober 2018 14:34
Aan: mailscanner at lists.mailscanner.info
CC: Shawn Iverson
Onderwerp: Re: MailScanner 5.1.2 not working



I'm not so sure that was the root cause, but I'll run tests on my end, just to be sure.

On Thu, Oct 25, 2018 at 8:33 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

Now after I comment out the mariyadb on the systemsd file
the system is scanning mail ...
Thank you for your co operation and support.
Maybe this maria shuold stay out at list for the ubuntu users ?


???????? ???? ?????? Koby Peleg Hen, ????25.10.2018 ???????? 14:57:
> I thing I found some thing,
> there is no file name Locks under the following dir 
> /var/spool/MailScanner/incoming
> so I added it and now no error.
> root at lab:/var/spool/MailScanner/incoming# systemctl status mailscanner -l
> ??? mailscanner.service - LSB: MSMilter daemon
>? ?? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
> vendor preset: enabled)
>? ?? Active: active (running) since Thu 2018-10-25 14:53:17 IDT; 3min 9s ago
>? ???? Docs: man:systemd-sysv-generator(8)
>? ? Process: 2672 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
> (code=exited, status=0/SUCCESS)
>? ? Process: 2689 ExecStart=/usr/lib/MailScanner/init/msmilter-init start 
> (code=exited, status=0/SUCCESS)
>? ?Main PID: 2706 (MSMilter Daemon)
>? ??? Tasks: 6 (limit: 2319)
>? ?? CGroup: /system.slice/mailscanner.service
>? ?????????? ??????2706 MSMilter Daemon
>? ?????????? ??????2710 MSMilter Daemon
>? ?????????? ??????2711 MSMilter Daemon
>? ?????????? ??????2712 MSMilter Daemon
>? ?????????? ??????2713 MSMilter Daemon
>? ?????????? ??????2714 MSMilter Daemon
> 
> But still no scannig...
> 
> 
> 
> 
> 
> 
> 
> 
> ???????? ???? ?????? Koby Peleg Hen, ????25.10.2018 ???????? 14:46:
>>
>> ??? mailscanner.service - LSB: MSMilter daemon
>> ??? Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled; 
>> vendor preset: enabled)
>> ??? Active: active (running) since Thu 2018-10-25 14:44:44 IDT; 19s ago
>> ????? Docs: man:systemd-sysv-generator(8)
>> ?? Process: 2366 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop 
>> (code=exited, status=0/SUCCESS)
>> ?? Process: 2383 ExecStart=/usr/lib/MailScanner/init/msmilter-init 
>> start (code=exited, status=0/SUCCESS)
>> ??Main PID: 2492 (MSMilter Daemon)
>> ???? Tasks: 6 (limit: 2319)
>> ??? CGroup: /system.slice/mailscanner.service
>> ??????????? ??????2492 MSMilter Daemon
>> ??????????? ??????2496 MSMilter Daemon
>> ??????????? ??????2497 MSMilter Daemon
>> ??????????? ??????2498 MSMilter Daemon
>> ??????????? ??????2499 MSMilter Daemon
>> ??????????? ??????2500 MSMilter Daemon
>>
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Reading configuration 
>> file /etc/MailScanner/conf.d/SmgMailScanner.conf
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
>> configuration file /etc/MailScanner/conf.d/README before, skipping.
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Configuration: Seen 
>> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before, 
>> skipping.
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Could not read 
>> directory /var/spool/MailScanner/incoming/Locks
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Error in 
>> configuration file line 3103, directory 
>> /var/spool/MailScanner/incoming/Locks for lockfiledir does not exist 
>> (or is not readable)
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 1500 hostnames 
>> from the phishing whitelist
>> Oct 25 14:44:43 lab.mksoft.co.il MSMilter[2396]: Read 16624 hostnames 
>> from the phishing blacklists
>> Oct 25 14:44:43 lab.mksoft.co.il root[2494]: MSMilter started
>> Oct 25 14:44:44 lab.mksoft.co.il msmilter-init[2383]: MSMilter started 
>> with process id 2492
>> Oct 25 14:44:44 lab.mksoft.co.il systemd[1]: Started LSB: MSMilter 
>> daemon.
>>
>>
> 
> 


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner





-- 
Shawn Iverson, CETL Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us























-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181025/6bfbf4f0/attachment.html>

From nerijus at users.sourceforge.net  Fri Oct 26 08:16:22 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Fri, 26 Oct 2018 11:16:22 +0300
Subject: MailScanner 5.1.2 not working
In-Reply-To: <vmime.5bd1cee5.2919.213c8a43d9934b5@ms249-lin-003.rotterdam.bazuin.nl>
References: <6b2b339a-0e55-faaa-96dc-8add2f9b19ff@mksoft.co.il>
 <vmime.5bd1cee5.2919.213c8a43d9934b5@ms249-lin-003.rotterdam.bazuin.nl>
Message-ID: <Mahogany-0.68.0-14051-20181026-111622.01@nerijus.sat.lt>

Not everyone uses mysql (mariadb) with MTA (postfix), so I don't know if
After and Wants should contain mariadb.service by default.

On Thu, 25 Oct 2018 16:10:45 +0200 "L.P.H. van Belle via MailScanner" <mailscanner at lists.mailscanner.info> wrote:

> ??? @Koby, 
> ?
> type : systemctl edit mailscanner.service
> And you get a clean page, that is the file : /etc/systemd/system/mailscanner.service.d/override.conf being created. 
> ?
> I've optimized the start order to my setup and same should Koby do. 
> Create an override and remove the mariadb.service in that setup. 
> ?
> ?
> This is my personal override.? 
> # /etc/systemd/system/mailscanner.service.d/override.conf
> [Unit]
> After=network-online.target remote-fs.target rsyslog.service mariadb.service postfix.service clamav-daemon.service
> Wants=network-online.target mariadb.service postfix.service clamav-daemon.service
> 
> @Shawn, 
> In the example, you posted, remove maridb.service from Wanted. 
> having it in After should be sufficient. 
> ?
> ?
> Greetz, 
> ?
> Louis
> ?
> ?
> Van: MailScanner [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.info] Namens Shawn Iverson via MailScanner
> Verzonden: donderdag 25 oktober 2018 14:34
> Aan: mailscanner at lists.mailscanner.info
> CC: Shawn Iverson
> Onderwerp: Re: MailScanner 5.1.2 not working
> 
> 
> 
> I'm not so sure that was the root cause, but I'll run tests on my end, just to be sure.
> 
> On Thu, Oct 25, 2018 at 8:33 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
> 
> Now after I comment out the mariyadb on the systemsd file
> the system is scanning mail ...
> Thank you for your co operation and support.
> Maybe this maria shuold stay out at list for the ubuntu users ?


From nerijus at users.sourceforge.net  Fri Oct 26 08:23:28 2018
From: nerijus at users.sourceforge.net (Nerijus Baliunas)
Date: Fri, 26 Oct 2018 11:23:28 +0300
Subject: esets report email
Message-ID: <Mahogany-0.68.0-14051-20181026-112328.00@nerijus.sat.lt>

Hello,

MailScanner 4.84.5 sends such report emails to postmaster:

    Sender: ...
IP Address: ...
 Recipient: ...
   Subject: ...
 MessageID: 8FD4F280461.A0833
Quarantine: 
    Report: esets: Found virus a variant of Win32/Injector.EBGJ trojan in Purchase Order_NO.1809940-pdf.arj ?? ZIP ?? scan-09480-pdf.exe
    Report: esets: Found virus a variant of Win32/Injector.EBGJ trojan in scan-09480-pdf.exe
            MailScanner: Executable DOS/Windows programs are dangerous in email (scan-09480-pdf.exe)
    Report: esets: Found virus a variant of Win32/Injector.EBGJ trojan in Purchase Order_NO.1809940-pdf.arj

While 5.1.2:

Quarantine: /var/spool/MailScanner/quarantine/20181026/4E9DE1872E80C9.A171B
    Report: Esets: found a variant of Win32/Injector.EBGJ trojan in Purchase Order_NO.1809940-pdf.arj ? ZIP ? scan-09480-pdf.exe 
            Esets Actions: deleted 
            Esets Additional Info: none 
            
    Report: Esets: found a variant of Win32/Injector.EBGJ trojan in 1scan-09480-pdf.exe 
            Esets Actions: cleaned by deleting 
            Esets Additional Info: none 
            
            MailScanner: Executable DOS/Windows programs are dangerous in email (1scan-09480-pdf.exe)
    Report: Esets: found a variant of Win32/Injector.EBGJ trojan in Purchase Order_NO.1809940-pdf.arj 
            Esets Actions: deleted 
            Esets Additional Info: none 
            
            Esets: found a variant of Win32/Injector.EBGJ trojan in scan-09480-pdf.exe 
            Esets Actions: cleaned by deleting 
            Esets Additional Info: none 
            
            MailScanner: Executable DOS/Windows programs are dangerous in email (scan-09480-pdf.exe)
    Report: Esets: found a variant of Win32/Injector.EBGJ trojan in scan-09480-pdf.exe 
            Esets Actions: cleaned by deleting 
            Esets Additional Info: none 
            
            MailScanner: Executable DOS/Windows programs are dangerous in email (scan-09480-pdf.exe)

4.84.5 variant was more compact and readable. Could it be possible to get the old
output back?

Regards,
Nerijus

From koby at mksoft.co.il  Fri Oct 26 09:09:44 2018
From: koby at mksoft.co.il (koby at mksoft.co.il)
Date: Fri, 26 Oct 2018 11:09:44 +0200
Subject: Expilicit Rule
Message-ID: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>

 Hello All

 I Would like your help to achieve the following rules (like many of my 
 firewall)
 which is Default block all and Explicit allow FileName & FileType by 
 rules.

 Right now I not able the achieve this

 Thank you all in advance for any help.

 Koby Peleg Hen


From iversons at rushville.k12.in.us  Fri Oct 26 10:03:36 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 26 Oct 2018 06:03:36 -0400
Subject: esets report email
In-Reply-To: <Mahogany-0.68.0-14051-20181026-112328.00@nerijus.sat.lt>
References: <Mahogany-0.68.0-14051-20181026-112328.00@nerijus.sat.lt>
Message-ID: <CABu_8zJQjwiMUi03pff+M_MW8OyD-v629u0djxDhK6FTZ13oaQ@mail.gmail.com>

https://github.com/MailScanner/v5/pull/284/files

On Fri, Oct 26, 2018 at 4:24 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> Hello,
>
> MailScanner 4.84.5 sends such report emails to postmaster:
>
>     Sender: ...
> IP Address: ...
>  Recipient: ...
>    Subject: ...
>  MessageID: 8FD4F280461.A0833
> Quarantine:
>     Report: esets: Found virus a variant of Win32/Injector.EBGJ trojan in
> Purchase Order_NO.1809940-pdf.arj ?? ZIP ?? scan-09480-pdf.exe
>     Report: esets: Found virus a variant of Win32/Injector.EBGJ trojan in
> scan-09480-pdf.exe
>             MailScanner: Executable DOS/Windows programs are dangerous in
> email (scan-09480-pdf.exe)
>     Report: esets: Found virus a variant of Win32/Injector.EBGJ trojan in
> Purchase Order_NO.1809940-pdf.arj
>
> While 5.1.2:
>
> Quarantine: /var/spool/MailScanner/quarantine/20181026/4E9DE1872E80C9.A171B
>     Report: Esets: found a variant of Win32/Injector.EBGJ trojan in
> Purchase Order_NO.1809940-pdf.arj ? ZIP ? scan-09480-pdf.exe
>             Esets Actions: deleted
>             Esets Additional Info: none
>
>     Report: Esets: found a variant of Win32/Injector.EBGJ trojan in
> 1scan-09480-pdf.exe
>             Esets Actions: cleaned by deleting
>             Esets Additional Info: none
>
>             MailScanner: Executable DOS/Windows programs are dangerous in
> email (1scan-09480-pdf.exe)
>     Report: Esets: found a variant of Win32/Injector.EBGJ trojan in
> Purchase Order_NO.1809940-pdf.arj
>             Esets Actions: deleted
>             Esets Additional Info: none
>
>             Esets: found a variant of Win32/Injector.EBGJ trojan in
> scan-09480-pdf.exe
>             Esets Actions: cleaned by deleting
>             Esets Additional Info: none
>
>             MailScanner: Executable DOS/Windows programs are dangerous in
> email (scan-09480-pdf.exe)
>     Report: Esets: found a variant of Win32/Injector.EBGJ trojan in
> scan-09480-pdf.exe
>             Esets Actions: cleaned by deleting
>             Esets Additional Info: none
>
>             MailScanner: Executable DOS/Windows programs are dangerous in
> email (scan-09480-pdf.exe)
>
> 4.84.5 variant was more compact and readable. Could it be possible to get
> the old
> output back?
>
> Regards,
> Nerijus
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181026/017a3bd6/attachment.html>

From iversons at rushville.k12.in.us  Fri Oct 26 10:05:53 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 26 Oct 2018 06:05:53 -0400
Subject: MailScanner 5.1.2 not working
In-Reply-To: <Mahogany-0.68.0-14051-20181026-111622.01@nerijus.sat.lt>
References: <6b2b339a-0e55-faaa-96dc-8add2f9b19ff@mksoft.co.il>
 <vmime.5bd1cee5.2919.213c8a43d9934b5@ms249-lin-003.rotterdam.bazuin.nl>
 <Mahogany-0.68.0-14051-20181026-111622.01@nerijus.sat.lt>
Message-ID: <CABu_8zLjaEmOg2U-9Ydsj5iOMaUHpaVdUFB+De2=gY-Jo1JyBA@mail.gmail.com>

It is true that not everyone needs this; however, when mariadb is not
present, these entries do not have an effect.  When it is installed, it is
important that 1) MailScanner starts after mariadb, and 2) mariadb is
started before mailscanner starts when systemctl operations happen.



On Fri, Oct 26, 2018 at 4:18 AM Nerijus Baliunas <
nerijus at users.sourceforge.net> wrote:

> Not everyone uses mysql (mariadb) with MTA (postfix), so I don't know if
> After and Wants should contain mariadb.service by default.
>
> On Thu, 25 Oct 2018 16:10:45 +0200 "L.P.H. van Belle via MailScanner" <
> mailscanner at lists.mailscanner.info> wrote:
>
> > ??? @Koby,
> >
> > type : systemctl edit mailscanner.service
> > And you get a clean page, that is the file :
> /etc/systemd/system/mailscanner.service.d/override.conf being created.
> >
> > I've optimized the start order to my setup and same should Koby do.
> > Create an override and remove the mariadb.service in that setup.
> >
> >
> > This is my personal override.
> > # /etc/systemd/system/mailscanner.service.d/override.conf
> > [Unit]
> > After=network-online.target remote-fs.target rsyslog.service
> mariadb.service postfix.service clamav-daemon.service
> > Wants=network-online.target mariadb.service postfix.service
> clamav-daemon.service
> >
> > @Shawn,
> > In the example, you posted, remove maridb.service from Wanted.
> > having it in After should be sufficient.
> >
> >
> > Greetz,
> >
> > Louis
> >
> >
> > Van: MailScanner [mailto:mailscanner-bounces+belle=
> bazuin.nl at lists.mailscanner.info] Namens Shawn Iverson via MailScanner
> > Verzonden: donderdag 25 oktober 2018 14:34
> > Aan: mailscanner at lists.mailscanner.info
> > CC: Shawn Iverson
> > Onderwerp: Re: MailScanner 5.1.2 not working
> >
> >
> >
> > I'm not so sure that was the root cause, but I'll run tests on my end,
> just to be sure.
> >
> > On Thu, Oct 25, 2018 at 8:33 AM Koby Peleg Hen <koby at mksoft.co.il>
> wrote:
> >
> > Now after I comment out the mariyadb on the systemsd file
> > the system is scanning mail ...
> > Thank you for your co operation and support.
> > Maybe this maria shuold stay out at list for the ubuntu users ?
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181026/bbbb8869/attachment.html>

From koby at mksoft.co.il  Fri Oct 26 10:11:21 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Fri, 26 Oct 2018 13:11:21 +0300
Subject: Expilicit Rule
In-Reply-To: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
References: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
Message-ID: <34eba723-2f44-4111-90d5-b5ab99935661@mksoft.co.il>



?-26 ????? 2018, 12:09, ?-koby at mksoft.co.il, 12:09 ???:
> Hello All
>
>I Would like your help to achieve the following rules (like many of my 
> firewall)
> which is Default block all and Explicit allow FileName & FileType by 
> rules.
>
> Right now I not able the achieve this
>
> Thank you all in advance for any help.
>
> Koby Peleg Hen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181026/1b65d90f/attachment.html>

From belle at bazuin.nl  Fri Oct 26 10:27:31 2018
From: belle at bazuin.nl (=?windows-1252?Q?L.P.H._van_Belle?=)
Date: Fri, 26 Oct 2018 12:27:31 +0200
Subject: MailScanner 5.1.2 not working
In-Reply-To: <Mahogany-0.68.0-14051-20181026-111622.01@nerijus.sat.lt>
References: <vmime.5bd1cee5.2919.213c8a43d9934b5@ms249-lin-003.rotterdam.bazuin.nl>
Message-ID: <vmime.5bd2ec13.265a.6da0c2855542a9c3@ms249-lin-003.rotterdam.bazuin.nl>

Hai Nerijus, 


> 
> Not everyone uses mysql (mariadb) with MTA (postfix), so I 
> don't know if After and Wants should contain mariadb.service by default.

I dont see why not, even it mysql/maria is not installed it wil not interfere with the working and startup of mailscanner.
If you look at my example.

Unit]
After=network-online.target remote-fs.target rsyslog.service mariadb.service postfix.service clamav-daemon.service
Wants=network-online.target mariadb.service postfix.service clamav-daemon.service

I would even preffer this to make it even more compatible, like : 

[Unit]
After=network-online.target remote-fs.target rsyslog.service mariadb.service mysql.service postfix.service exim4.service clamav-daemon.service
Wants=network-online.target mariadb.service postfix.service clamav-daemon.service


If unit1 (mailscanner) has Wants=unit2 (multiple as shown above) as a dependency, when unit1 is started, 
unit2 will be run as well. But whether unit2 starts successfully does not affect unit1 running successfully.

So you can add any service you want/need in combination with mailscanner. 

The After is for the startup order, which can greatly improve the start up of you system 
and i can recude log messages of started services that shoulded started later on.

I've reorded my start order for my anti-spam server to. 

Bind
Network-online
MariaDB
Antivirus
postfix
Mailscanner

If you add Requires= then its an other thing, thats a hard requirement. 
If unit1 Requires=unit2 and unit2 isnt starting then unit1 isnt starting also. 


Greetz, 

Louis


From djones at ena.com  Fri Oct 26 11:16:41 2018
From: djones at ena.com (David Jones)
Date: Fri, 26 Oct 2018 11:16:41 +0000
Subject: Expilicit Rule
In-Reply-To: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
References: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
Message-ID: <1a6ce161-bba4-4b85-0b72-ba783d948462@ena.com>

On 10/26/18 4:09 AM, koby at mksoft.co.il wrote:
> Hello All
> 
> I Would like your help to achieve the following rules (like many of my 
> firewall)
> which is Default block all and Explicit allow FileName & FileType by rules.
> 
> Right now I not able the achieve this
> 
> Thank you all in advance for any help.
> 
> Koby Peleg Hen
> 
> 
> 

Normally that would not be done in SpamAssassin but in the "glue" that 
uses/calls SpamAssassin like MIMEDefang, AmavisNew, MailScanner, etc. 
Or you can do it at the MTA with a milter.  Since you didn't tell us any 
details about your environment, it's tough for us to guess.

https://wiki.apache.org/spamassassin/MailingLists

See the 3 bullets in the "Users" section on what information should be 
included with a question like this.

I mainly use MailScanner which has settings to do exactly what you are 
asking to do.  I understand that MIMEDefang is very powerful and 
flexible and AmavisNew has a banned_filename_re setting that I just 
found with a quick Google search.

Thanks
-- 
David Jones

From koby at mksoft.co.il  Fri Oct 26 11:01:21 2018
From: koby at mksoft.co.il (koby at mksoft.co.il)
Date: Fri, 26 Oct 2018 13:01:21 +0200
Subject: Expilicit Rule
In-Reply-To: <1a6ce161-bba4-4b85-0b72-ba783d948462@ena.com>
References: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
 <1a6ce161-bba4-4b85-0b72-ba783d948462@ena.com>
Message-ID: <7b96e0678c9d617be964e95f02e9451e@mksoft.co.il>

 I do use mailscanner


 On Fri, 26 Oct 2018 11:16:41 +0000, David Jones via MailScanner 
 <mailscanner at lists.mailscanner.info> wrote:
> On 10/26/18 4:09 AM, koby at mksoft.co.il wrote:
>> Hello All
>>
>> I Would like your help to achieve the following rules (like many of 
>> my
>> firewall)
>> which is Default block all and Explicit allow FileName & FileType by 
>> rules.
>>
>> Right now I not able the achieve this
>>
>> Thank you all in advance for any help.
>>
>> Koby Peleg Hen
>>
>>
>>
>
> Normally that would not be done in SpamAssassin but in the "glue" 
> that
> uses/calls SpamAssassin like MIMEDefang, AmavisNew, MailScanner, etc.
> Or you can do it at the MTA with a milter.  Since you didn't tell us 
> any
> details about your environment, it's tough for us to guess.
>
> https://wiki.apache.org/spamassassin/MailingLists
>
> See the 3 bullets in the "Users" section on what information should 
> be
> included with a question like this.
>
> I mainly use MailScanner which has settings to do exactly what you 
> are
> asking to do.  I understand that MIMEDefang is very powerful and
> flexible and AmavisNew has a banned_filename_re setting that I just
> found with a quick Google search.
>
> Thanks
> --
> David Jones


From Antony.Stone at mailscanner.open.source.it  Fri Oct 26 12:30:54 2018
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Fri, 26 Oct 2018 14:30:54 +0200
Subject: Expilicit Rule
In-Reply-To: <7b96e0678c9d617be964e95f02e9451e@mksoft.co.il>
References: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
 <1a6ce161-bba4-4b85-0b72-ba783d948462@ena.com>
 <7b96e0678c9d617be964e95f02e9451e@mksoft.co.il>
Message-ID: <201810261430.54710.Antony.Stone@mailscanner.open.source.it>

On Friday 26 October 2018 at 13:01:21, koby at mksoft.co.il wrote:

>  I do use mailscanner

Yes, we pretty much assumed that from (a) your question, and (b) the fact that 
you posted it to this list.

I repeat David's request:

	https://wiki.apache.org/spamassassin/MailingLists

	See the 3 bullets in the "Users" section on what information should 
	be included with a question like this.

Regards,


Antony.

>  On Fri, 26 Oct 2018 11:16:41 +0000, David Jones wrote:
> > On 10/26/18 4:09 AM, koby at mksoft.co.il wrote:
> >> Hello All
> >> 
> >> I Would like your help to achieve the following rules (like many of
> >> my firewall) which is Default block all and Explicit allow FileName &
> >> FileType by rules.
> >> 
> >> Right now I not able the achieve this
> >> 
> >> Thank you all in advance for any help.
> >> 
> >> Koby Peleg Hen
> > 
> > Normally that would not be done in SpamAssassin but in the "glue"
> > that uses/calls SpamAssassin like MIMEDefang, AmavisNew, MailScanner, etc.
> > Or you can do it at the MTA with a milter.  Since you didn't tell us any
> > details about your environment, it's tough for us to guess.
> > 
> > https://wiki.apache.org/spamassassin/MailingLists
> > 
> > See the 3 bullets in the "Users" section on what information should be
> > included with a question like this.
> > 
> > I mainly use MailScanner which has settings to do exactly what you are
> > asking to do.  I understand that MIMEDefang is very powerful and
> > flexible and AmavisNew has a banned_filename_re setting that I just
> > found with a quick Google search.
> > 
> > Thanks
> > --
> > David Jones

-- 
"If I've told you once, I've told you a million times - stop exaggerating!"

                                                   Please reply to the list;
                                                         please *don't* CC me.

From djones at ena.com  Fri Oct 26 13:24:08 2018
From: djones at ena.com (David Jones)
Date: Fri, 26 Oct 2018 13:24:08 +0000
Subject: Expilicit Rule
In-Reply-To: <201810261430.54710.Antony.Stone@mailscanner.open.source.it>
References: <3db593111fc7343aa051e0fc906b9239@mksoft.co.il>
 <1a6ce161-bba4-4b85-0b72-ba783d948462@ena.com>
 <7b96e0678c9d617be964e95f02e9451e@mksoft.co.il>
 <201810261430.54710.Antony.Stone@mailscanner.open.source.it>
Message-ID: <4ee66abd-43c7-5905-19bb-9fea640f50c5@ena.com>

On 10/26/18 7:30 AM, Antony Stone wrote:
> On Friday 26 October 2018 at 13:01:21, koby at mksoft.co.il wrote:
> 
>>   I do use mailscanner
> 
> Yes, we pretty much assumed that from (a) your question, and (b) the fact that
> you posted it to this list.

Oh sorry.  I didn't look closely and thought this was sent to the SA list.

> 
> I repeat David's request:
> 
> 	https://wiki.apache.org/spamassassin/MailingLists
> 
> 	See the 3 bullets in the "Users" section on what information should
> 	be included with a question like this.
> 
> Regards,
> 

https://www.mailscanner.info/MailScanner.conf.index.html#Filename%20Rules

https://www.mailscanner.info/MailScanner.conf.index.html#Filetype%20Rules

Just start playing testing the settings until you get the desired outcome.

> 
> Antony.
> 
>>   On Fri, 26 Oct 2018 11:16:41 +0000, David Jones wrote:
>>> On 10/26/18 4:09 AM, koby at mksoft.co.il wrote:
>>>> Hello All
>>>>
>>>> I Would like your help to achieve the following rules (like many of
>>>> my firewall) which is Default block all and Explicit allow FileName &
>>>> FileType by rules.
>>>>
>>>> Right now I not able the achieve this
>>>>
>>>> Thank you all in advance for any help.
>>>>
>>>> Koby Peleg Hen
>>>
>>> Normally that would not be done in SpamAssassin but in the "glue"
>>> that uses/calls SpamAssassin like MIMEDefang, AmavisNew, MailScanner, etc.
>>> Or you can do it at the MTA with a milter.  Since you didn't tell us any
>>> details about your environment, it's tough for us to guess.
>>>
>>> https://wiki.apache.org/spamassassin/MailingLists
>>>
>>> See the 3 bullets in the "Users" section on what information should be
>>> included with a question like this.
>>>
>>> I mainly use MailScanner which has settings to do exactly what you are
>>> asking to do.  I understand that MIMEDefang is very powerful and
>>> flexible and AmavisNew has a banned_filename_re setting that I just
>>> found with a quick Google search.
>>>
>>> Thanks
>>> --
>>> David Jones
> 


-- 
David Jones

From koby at mksoft.co.il  Sun Oct 28 10:26:26 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Sun, 28 Oct 2018 12:26:26 +0200
Subject: Mailscanner Restart
Message-ID: <48f2b504-ade0-cdda-9783-257167e580c0@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181028/0a33be57/attachment.html>

From koby at mksoft.co.il  Sun Oct 28 10:37:26 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Sun, 28 Oct 2018 12:37:26 +0200
Subject: Milter issu
Message-ID: <5cefff44-ba14-7ecd-b5e7-1ef306f0b833@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181028/08cf535a/attachment.html>

From iversons at rushville.k12.in.us  Sun Oct 28 11:36:43 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 28 Oct 2018 07:36:43 -0400
Subject: Milter issu
In-Reply-To: <5cefff44-ba14-7ecd-b5e7-1ef306f0b833@mksoft.co.il>
References: <5cefff44-ba14-7ecd-b5e7-1ef306f0b833@mksoft.co.il>
Message-ID: <CABu_8zLKDOidyRqYYk8LTFnT-CpBnnpb7O1AW78A1hnLzp9usw@mail.gmail.com>

This is likely related to your prior issue in which mailscanner.service was
starting the milter instead of mailscanner.  It is probably already
running, although it should not be.

On Sun, Oct 28, 2018 at 6:37 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Hello All
>
>
> I get error
>
>
>
> ? msmilter.service - LSB: MSMilter daemon
>    Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
> vendor preset: enabled)
>    Active: failed (Result: timeout) since Sun 2018-10-28 12:24:20 IST;
> 10min ago
>      Docs: man:systemd-sysv-generator(8)
>   Process: 3314 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
> (code=exited, status=0/SUCCESS)
>   Process: 3341 ExecStart=/usr/lib/MailScanner/init/msmilter-init start
> (code=killed, signal=TERM)
>  Main PID: 1885 (code=exited, status=0/SUCCESS)
>     Tasks: 6 (limit: 4661)
>    CGroup: /system.slice/msmilter.service
>            ??3500 MSMilter Daemon
>            ??3502 MSMilter Daemon
>            ??3503 MSMilter Daemon
>            ??3504 MSMilter Daemon
>            ??3505 MSMilter Daemon
>            ??3506 MSMilter Daemon
>
> Oct 28 12:24:20 lab.mksoft.co.il systemd[1]: Failed to start LSB:
> MSMilter daemon.
> Oct 28 12:24:25 lab.mksoft.co.il msmilter-init[3341]: Trying to
> setlogsock(unix)
> Oct 28 12:24:25 lab.mksoft.co.il MSMilter[3357]: MSMilter Daemon
> starting...
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Reading configuration
> file /etc/MailScanner/MailScanner.conf
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Reading configuration
> file /etc/MailScanner/conf.d/README
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Reading configuration
> file /etc/MailScanner/conf.d/SmgMailScanner.conf
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/README before, skipping.
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Configuration: Seen
> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
> skipping.
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Read 1500 hostnames from
> the phishing whitelist
> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Read 16624 hostnames
> from the phishing blacklist
>
>
>
> I use ubuntu 18.04
>
>
>
> Any Help please
>
>
> Koby Peleg Hen
>
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181028/30ededf4/attachment.html>

From koby at mksoft.co.il  Sun Oct 28 11:42:41 2018
From: koby at mksoft.co.il (Koby Peleg Hen)
Date: Sun, 28 Oct 2018 13:42:41 +0200
Subject: Milter issu
In-Reply-To: <CABu_8zLKDOidyRqYYk8LTFnT-CpBnnpb7O1AW78A1hnLzp9usw@mail.gmail.com>
References: <5cefff44-ba14-7ecd-b5e7-1ef306f0b833@mksoft.co.il>
 <CABu_8zLKDOidyRqYYk8LTFnT-CpBnnpb7O1AW78A1hnLzp9usw@mail.gmail.com>
Message-ID: <14fada01-97e5-5793-e262-60c2b3df4de6@mksoft.co.il>

An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181028/77fb613c/attachment.html>

From iversons at rushville.k12.in.us  Sun Oct 28 11:54:42 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Sun, 28 Oct 2018 07:54:42 -0400
Subject: Milter issu
In-Reply-To: <14fada01-97e5-5793-e262-60c2b3df4de6@mksoft.co.il>
References: <5cefff44-ba14-7ecd-b5e7-1ef306f0b833@mksoft.co.il>
 <CABu_8zLKDOidyRqYYk8LTFnT-CpBnnpb7O1AW78A1hnLzp9usw@mail.gmail.com>
 <14fada01-97e5-5793-e262-60c2b3df4de6@mksoft.co.il>
Message-ID: <CABu_8zKRJ9nyJaZxZy__njDi8TXRDRK_w=y0e7k2NNH7k_OMPQ@mail.gmail.com>

18.04 is supported.

On Sun, Oct 28, 2018 at 7:42 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:

> Sorry ,
>
> but I can not struggle it any more, so I decided to delete all and install
> all from scratch not as milter this time.
>
> I must get progress with my project.
>
>
> Btw , 5.1.2 on ubuntu 18.04 installed without and any rule example as
> 5.1.1 does.
>
>
> Is ubuntu 18.04 is fully supported ?
>
>
> Koby Peleg Hen.
>
>
>
> This is likely related to your prior issue in which mailscanner.service
> was starting the milter instead of mailscanner.  It is probably already
> running, although it should not be.
>
> On Sun, Oct 28, 2018 at 6:37 AM Koby Peleg Hen <koby at mksoft.co.il> wrote:
>
>> Hello All
>>
>>
>> I get error
>>
>>
>>
>> ? msmilter.service - LSB: MSMilter daemon
>>    Loaded: loaded (/usr/lib/MailScanner/init/msmilter-init; enabled;
>> vendor preset: enabled)
>>    Active: failed (Result: timeout) since Sun 2018-10-28 12:24:20 IST;
>> 10min ago
>>      Docs: man:systemd-sysv-generator(8)
>>   Process: 3314 ExecStop=/usr/lib/MailScanner/init/msmilter-init stop
>> (code=exited, status=0/SUCCESS)
>>   Process: 3341 ExecStart=/usr/lib/MailScanner/init/msmilter-init start
>> (code=killed, signal=TERM)
>>  Main PID: 1885 (code=exited, status=0/SUCCESS)
>>     Tasks: 6 (limit: 4661)
>>    CGroup: /system.slice/msmilter.service
>>            ??3500 MSMilter Daemon
>>            ??3502 MSMilter Daemon
>>            ??3503 MSMilter Daemon
>>            ??3504 MSMilter Daemon
>>            ??3505 MSMilter Daemon
>>            ??3506 MSMilter Daemon
>>
>> Oct 28 12:24:20 lab.mksoft.co.il systemd[1]: Failed to start LSB:
>> MSMilter daemon.
>> Oct 28 12:24:25 lab.mksoft.co.il msmilter-init[3341]: Trying to
>> setlogsock(unix)
>> Oct 28 12:24:25 lab.mksoft.co.il MSMilter[3357]: MSMilter Daemon
>> starting...
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Reading configuration
>> file /etc/MailScanner/MailScanner.conf
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Reading configuration
>> file /etc/MailScanner/conf.d/README
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Reading configuration
>> file /etc/MailScanner/conf.d/SmgMailScanner.conf
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Configuration: Seen
>> configuration file /etc/MailScanner/conf.d/README before, skipping.
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Configuration: Seen
>> configuration file /etc/MailScanner/conf.d/SmgMailScanner.conf before,
>> skipping.
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Read 1500 hostnames
>> from the phishing whitelist
>> Oct 28 12:24:47 lab.mksoft.co.il MSMilter[3357]: Read 16624 hostnames
>> from the phishing blacklist
>>
>>
>>
>> I use ubuntu 18.04
>>
>>
>>
>> Any Help please
>>
>>
>> Koby Peleg Hen
>>
>>
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 option 7
> iversons at rushville.k12.in.us
>
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181028/01693bc8/attachment.html>

From mark at msapiro.net  Mon Oct 29 20:29:13 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 29 Oct 2018 13:29:13 -0700
Subject: Mailscanner Restart
In-Reply-To: <48f2b504-ade0-cdda-9783-257167e580c0@mksoft.co.il>
References: <48f2b504-ade0-cdda-9783-257167e580c0@mksoft.co.il>
Message-ID: <2b41803d-391e-4e47-c913-6ea367d148dc@msapiro.net>

On 10/28/18 3:26 AM, Koby Peleg Hen wrote:
> Hello All ,
> 
> I would to ask? please ,
> 
> When mailscanner is set as a milter what should be the restart command :
> 
> service mailscanner restart OR? service msmilter restart ?


service mailscanner restart will restart the mailscanner process(es).

service msmilter restart will restart the msmilter process(es).

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan